Hack Like a Pro: How to Use Hacking Team's Adobe Flash Exploit « Null Byte :: WonderHowTo

Welcome back, my novice hackers!As most of you know by now, a notorious commercial, legal hacking group named "Hacking Team"was recently hacked. As part of the hack, thousands of emails and other material on their servers was divulged. Among the material released were three zero-day exploits. In this tutorial, we will walk through the steps to load one of them, which has become known as theCVE-2015-5119exploit.As most of you know, I think that Adobe's Flash application is among the most vulnerable applications known to mankind. New vulnerabilities and exploits are found nearly daily. When I am advising highly secure environments such as banks and the military, I advise that Adobe Flash should be banned from all systems within the organization in order to remain secure. Fortunately for you hackers, few organizations heed this advice.The Hacking Team dump took place Sunday, July 5th, with millions of emails and other material downloaded and placed on WikiLeaks. Within days, a developer at Rapid7 had integrated this zero-day into a newMetasploitexploit. Unfortunately, as of July 13th, it is still not available from Rapid7 via msfupdate. However, it is available in a number of different places includingSecurityFocus. I wanted to get this code to you as soon as possible while this vulnerability is still largely un-patched.Step 1: Find the Exploit CodeLet's begin by going tosecurityfocus.com/vulnerabilities. There, let's search for CVE-2015-5119. When you do so, you will come to this vulnerability as seen below.We can then click on the "Exploit" tab, and it will show usa link to the exploitas seen below.Click onthe linkand it will open a screen with the exploit code.Copy and paste it into a text file. Now save that text file to your Desktop naming itadobe_hackingteam_exploit.rb. You can name it whatever you want, but if you aren't familiar with Metasploit, follow my instructions precisely to simplify this process and to increase the likelihood of success.Step 2: Install into MetasploitIn the next step, we need to install this module into Metasploit if we are to use it. Please seemy tutorial on installing new modules, and follow the instructions carefully with the exception that we will be moving this exploit to:kali > mv /root/Desktop/adobe_hackingteam_2015 /root/.msf/modules/exploits/windows/flashNow, to make certain the exploit moved, let's list the contents of that directory:kali > ls -l /root/.msf4/modules/exploits/windows/flashAs you can see, our new Hacking Team exploit has been moved to the proper directory for use with Metasploit. If you don't have that directory, simply create it withmkdir.Step 3: Start MetasploitNow, let's start Metasploit and see whether we can use that new exploit. Open the Metasploit console with:kali > msfconsoleWhen the msfconsole opens, let's search for our new module. Type:msf > search hackingteamAs you can see in the screenshot above, the new exploit has been loaded into Metasploit and is ready to use. To use the new exploit, type:msf> use exploit/windows/flash/adobe_hackingteam_2015Finally, let's get a bit of information about our new exploit.msf > infoAlthough Adobe has released a patch for this exploit, there are still likely millions of systems still vulnerable to this attack.Now that we have this exploit locked and loaded, I will show you how to use this exploit in a future tutorial. If you can't wait until then (I understand), take a look atmy other Adobe Metasploit hack tutorial. This one works very similarly.Want to start making money as a white hat hacker?Jump-start your hacking career with our2020 Premium Ethical Hacking Certification Training Bundlefrom the newNull Byte Shopand get over 60 hours of training from cybersecurity professionals.Buy Now (90% off) >Other worthwhile deals to check out:97% off The Ultimate 2021 White Hat Hacker Certification Bundle99% off The 2021 All-in-One Data Scientist Mega Bundle98% off The 2021 Premium Learn To Code Certification Bundle62% off MindMaster Mind Mapping Software: Perpetual LicenseRelatedHack Like a Pro:Hacking Windows XP Through Windows 8 Using Adobe Flash PlayerHack Like a Pro:How to Find Almost Every Known Vulnerability & Exploit Out ThereHack Like a Pro:How to Exploit Adobe Flash with a Corrupted Movie File to Hack Windows 7News:The DEA Spent $575,000 of Your Tax Dollars on Zero-Day ExploitsHack Like a Pro:How to Exploit and Gain Remote Access to PCs Running Windows XPHack Like a Pro:How to Embed a Backdoor Connection in an Innocent-Looking PDFHow To:Hack Your Kindle Touch to Get It Ready for Homebrew Apps & MoreHow To:Install Adobe Flash Player on Your Nexus 7 Running Android 4.4 KitKatHack Like a Pro:How to Spy on Anyone, Part 2 (Finding & Downloading Confidential Documents)Hack Like a Pro:How Windows Can Be a Hacking Platform, Pt. 1 (Exploit Pack)How To:Adobe Flash Player Is Bad for Your Computer (Here's How You Uninstall It)Hack Like a Pro:How to Exploit IE8 to Get Root Access When People Visit Your WebsiteHack Like a Pro:Exploring the Inner Architecture of MetasploitHack Like a Pro:How to Cover Your Tracks So You Aren't DetectedNews:Some of the World's Most Notorious Hackers Got HackedHack Like a Pro:How to Hack Windows Vista, 7, & 8 with the New Media Center ExploitHow To:Get LED Color Effects for Music Playing on Your AndroidHack Like a Pro:Hacking Samba on Ubuntu and Installing the MeterpreterHow To:amend Adobe Flash SettingsNews:Hack Your Computer's BIOS to Unlock Hidden Settings, Overclocking & MoreHow To:Use title templates in Adobe Premiere ProHow To:Use Adobe Flash CS4 3D toolsHow To:Use the Adobe Flash CS4 deco toolHow To:Create motion in Adobe Flash with bones toolHow To:Create a smoke effect in Adobe FlashHow To:Use trace bitmap in Adobe Flash CS4Use Adobe Premiere Pro feature:text rolls and crawlsHow To:Create transitions in Adobe Premiere ProHow To:Animate using keyFrames in Adobe Premiere ProHow To:Use the Adobe Premiere Pro CS4 nest commandHow To:Export XFL format from After Effects to FlashHow To:Clean up audio with audio effects in Premiere Pro CS4How To:Map photos to 3D objects in Adobe Illustrator CS3How To:Create a snow globe in Adobe After Effects CS4