O'Reilly logo

Metasploit Revealed: Secrets of the Expert Pentester by Nipun Jaswal, Sagar Rahalkar

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Scanning internal networks through a meterpreter pivot

Let's quickly run a port scan, as shown in the following screenshot:

Running the port scan on the entire range, we can see we have a single host, that is, 172.8.128.3, with open ports which are 3306 (a popular MySQL port) and port 80 (HTTP). Let's quickly fingerprint the HTTP server running on port 80 using auxiliary/scanner/http/http_version. We can see that we have the same version of the Apache software running on 192.168.10.110 here as well. The IP address 172.28.128.3 could be a mirror test environment. However, we did not find any MySQL port on that host. Let us quickly update the ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required