#nicetoknow

[exploitagency]

#nicetoknow

[exploitagency]

The device must be physically connected to a target's USB port to deploy a payload. Of course you can use the ESPortal mode (with the proper configuration) in this manner and perform a phishing exercise when both are on the same network.

[hanshaze]

Thanks....and can you go a little bit further into Detail please? My plan is to drop a meterpreter shell on the target without getting in contact.....so, how would you do that with phishing? Hta code in the portal html maybe?

[exploitagency]

You obviously have to email a link to the phishing page or somehow communicate wih the victim that they need to visit the link. Maybe upload an infected file to the esploit via ftp if it is a small enough file to fit in the limited storage else host it online. Create the page with a download link, name it properly and upload via ftp. Then have the victim download the file and run it.

[exploitagency]

Maybe even try using the network messenger service to send an alert to the victim.

[hanshaze]

top! mucias gracias ^^