Home page logo
/

metasploit logo Metasploit mailing list archives

checkvm script problem?
From: "Sherif Eldeeb" <archeldeeb () gmail com>
Date: Sat, 24 Apr 2010 16:56:18 +0300

Checkvm script is identifying machines that has vmware *installed* on them
as VMs...


@Carlos: Multiscript is now working fine & I love your work :), thank you
for being there for us...

============================================================================
======

msf exploit(handler) >
[*] Sending stage (748032 bytes) to 192.168.1.1
[*] Meterpreter session 1 opened (192.168.1.9:443 -> 192.168.1.1:6589)

msf exploit(handler) > sessions -i 1
[*] Starting interaction with 1...

meterpreter > run multiscript -c "checkvm"
[*] Running Multiscript script.....
[*] Running script List ...
[*]     running script checkvm
[*] Checking if target is a Virtual Machine .....
[*] This is a VMware Virtual Machine
meterpreter > run checkvm
[*] Checking if target is a Virtual Machine .....
[*] This is a VMware Virtual Machine
meterpreter >   

[*] Sending stage (748032 bytes) to 192.168.1.1
[*] Meterpreter session 2 opened (192.168.1.9:443 -> 192.168.1.1:7516)
meterpreter > background
msf exploit(handler) > sessions -i 2
[*] Starting interaction with 2...

meterpreter > run checkvm
[*] Checking if target is a Virtual Machine .....
[*] It appears to be physical host.
meterpreter >
               
============================================================================
======

Even though both sessions came from physical machines, the first one is
identified as a VM, it has VMware workstation installed on it "Vista
Business SP2 x86", and the other one is correctly assumed to be physical
since it does not have VMware installed "Windows server 2k3 x86".

Thanks in advance..
Sherif


_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault