This host is not accessible from Internet, 192.168.78.25: is the target machine, the one the attacker wants to scan.192.168.78.5: is the compromised machine that the attacker will use for pivoting.Let’s first define the scenario and then we will go through the configuration steps. We will show you how to configure Nessus and Metasploit and then discuss these issues. You can find his article here: ĭuring our tests we have found limitations and issues to this technique. In this post we will use Nessus as a vulnerability scanner.ĭigiNinja has discussed this topic in depth before. What we want to discuss today, is not exploiting machines through pivoting (that we cover in depth in our course), but how pivoting can be used, during the Post-exploitation process, to scan internal networks, not directly accessible to us. Pivoting can be done in Metasploit, it works very well and it’s quite simple to do. Most of the time the attacker uses this technique to infiltrate multiple computers and subnets in order to reach his ultimate goal (dumping a database, accessing isolated information…). With this technique, an attacker can use a compromised machine as a “pivot” to attack other machines in the same or in other networks that the compromised host can reach.

One of the best features that Metasploit offers is the ability of “pivoting”. Tools: Nessus, Metasploit, Nmap, proxychains.Īttention: In our tests proxychains works only on 32 bit Backtrack 5

How to use nessus on metasploit 2