Easysploit - Easy & Automatic Metasploit

EasySploit is a lazy script for Metasploit. It is an automatic script to make Metasploit payload and start listeners. Easysploit is very easy to use for even beginners.

We learn how we can install Easysploit on our Kali Linux system and use it. Before installing and using let's check its option:

Options of Easysploit:

• Windows --> test.exe (payload and listener)

• Android --> test.apk (payload and listener)

• Linux --> test.py (payload and listener)

• MacOS --> test.jar (payload and listener)

• Web --> test.php (payload and listener)

• Scan if a target is vulnerable to ms17_010

• Exploit Windows 7/2008 x64 ONLY by IP (ms17_010_eternalblue)

• Enable Remote Desktop (ms17_010_eternalblue)

• Exploit Windows Vista/XP/2000/2003 ONLY by IP (ms17_010_psexec)

• Enable Remote Desktop (ms17_010_psexec)

• Exploit Windows with a link (HTA Server)

Install Easysploit on Kali Linux

First we clone Easysploit from it's GitHub repository by using following command:

git clone https://github.com/KALILINUXTRICKSYT/easysploit

The screenshot of the command is following:

Then we navigate to easysploit directory by using cd command:

cd easysploit Now we install the easysploit by applying following command:

sudo bash installer.sh Here if it prompts for root password we need to provide it and press enter. Then Easysploit will be successfully installed in our Linux system.

Now we can open it by entering easysploit command anywhere in terminal.

sudo easysploit The following screenshot shows the output of the preceding command:

Now we can easily create payloads for Windows, Mac, Android and Linux in seconds. For an example we choose 2 for Android then easysploit create a Android metasploit payload on our Desktop and start the listener:

We just need to send the payload to target and convince our to target install this APK file (we can so social-engineering). That's all. We got connected to our payload and meterpreter session will created. Isn't is too easy? No need to remember long commands like msfvenom neither need to check for IP. It automatically do all the things. Easysploit is Easy.