Scanning internal networks through a meterpreter pivot

Let's quickly run a port scan, as shown in the following screenshot:

Running the port scan on the entire range, we can see we have a single host, that is, 172.8.128.3, with open ports which are 3306 (a popular MySQL port) and port 80 (HTTP). Let's quickly fingerprint the HTTP server running on port 80 using auxiliary/scanner/http/http_version. We can see that we have the same version of the Apache software running on 192.168.10.110 here as well. The IP address 172.28.128.3 could be a mirror test environment. However, we did not find any MySQL port on that host. Let us quickly update the ...

Get Metasploit Revealed: Secrets of the Expert Pentester now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.