0

What is the meaning of "meterpreter session"? My understanding is it is a session that we can send commands to the host for execution. And a meterpreter session is created when we don't get a shell.

1
  • Thank u all, what u are saying is meterpreter is program that gives us the OS shell and also allows us to execute metasploit post exploitation modules on the target, Right! May 4, 2021 at 9:30

2 Answers 2

1

And a meterpreter session is created when we don't get a shell.

This is wrong. When you use Metasploit, you choose the exploit you wish to use, and often times the payload you wish to execute. This payload could be a specific action on the target OS (e.g. create a new user, delete a file, etc...), an OS shell or a Meterpreter shell.

What's the difference between Meterpreter and an OS shell?

Meterpreter is a program that's supposed to make post-exploitation a lot easier. It allows you to manage your initial session on the target machine, such as migrating into an existing process, or killing AV, if that's a problem.

Best of all, it allows you to load other post-exploitation modules, such as Mimikatz, which can be used to dump credentials or perform further attack.

And finally, Meterpreter can also act as a regular OS shell. So for all intents and purposes, Meterpreter sessions are preferable.

4
  • That means a meterpreter shell can allow us to load modules from metasploit to the target machine, meterpreter also acts like a shell, modules loader etc May 4, 2021 at 12:44
  • @ranjitsilent Correct.
    – user163495
    May 4, 2021 at 12:58
  • Since I got my answer, Is there any option to close this or shall I leave this question like this only May 4, 2021 at 16:48
  • @ranjitsilent Please click the checkmark below the answer you believe to be the one to answer your question sufficiently. This marks your question as answered.
    – user163495
    May 4, 2021 at 23:54
1

Meterpreter is one kind of shell. So, you can send commands in both a meterpreter session and a shell.

You configure the exploit to use what you want, either meterpreter or some other command shell. Metasploit doesn't decide that for you.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.