#Microsoft word for mac os x mac os x

The first is the web_delivery module, and the second is the payload reverse_https. Once the settings are loaded, running the command show options shows the current Metasploit configuration for the session. Typing “ msfconsole -q -r osx_meterpreter_test” executes Metasploit in quiet mode (-q) and loads the script file (-r) provided. Kali Linux: 192.168.71.129 Setting Up the Metasploitįirst, we created a new script file on the Kali Linux VM with Metasploit installed containing the commands required to set Metasploit.įigure 1 – The content of the script file

#Microsoft word for mac os x mac os x

The Windows 7 machine acts as an infected Windows system, the Mac OS X machine acts as an infected Mac OS X system, and the Kali Linux VM acts as the attacker’s server running Metasploit.įollowing are the IP addresses of these virtual machines. The testing environment consists of three virtual machines running 64-bit Windows 7, 64-bit Mac OS X, and 64-bit Kali Linux, respectively. This blog provides a walk-through of the attack process with the server we set up, and shows what an attacker can do on an infected system. Since the attacker’s server doesn’t currently respond to any requests, we decided to set up a Metasploit to confirm our observation.

More information about Meterpreter can be found here.įor this to work, the attacker’s server must be running Metasploit as the controller to control the infected systems. Meterpreter is part of the Metasploit framework. After deeper investigation of this malware sample, we can confirm that after a successful infection the post-exploitation agent Meterpreter is run on the infected Mac OS X or Windows system. In the blog we posted on March 22, FortiGuard Labs introduced a new Word Macro malware sample that targets both Apple Mac OS X and Microsoft Windows.