Meterpreter download result return blank

Question

I am performing the exploit,unix/webapp/wp_admin_shell_upload on wordshell website.

Here is the screenshot of the exploit options.

I managed to run the exploit. However when I want to download passwd file from the remote machine using meterpreter.

The result return blank.

Even I tried to view the passwd file from my Kali Linux, the passwd file is not there.May I know what is the cause of the problem. Other commands works such as getuid.

It shows me the result.

Answer 1

I suppose you don't have the privileges to view the file. Execute

cd /etc
ls

in meterpreter. It will show you a column with r, w, and x es. This is the privilege column. You need to see three r letters next to the passwd file, then the file is world readable - /etc/passwd usually is.

By the way, getsystem only works on windows. You can try local_exploit_suggester module on linux, but privilege escalation is generally more difficult on linux. There are also a lot of privesc python and perl scripts on the web, try them, for example pentestmonkey's linuxprivesc.py

You can also try meterpreter shell command, and check for sudo and su.