Home page logo

metasploit logo Metasploit mailing list archives

Re: meterpreter
From: "Nicolas Krassas" <krasn () ans gr>
Date: Wed, 23 Jun 2010 18:12:23 +0300

Hi Jonathan, 

  Thanks for your reply I'm aware of the first 2 options none of them though is what I'm looking for. The service , 
metsvc  is dependent on the framework itself, also implies that I've the right to install a service,  and that is 
exactly what I don't :) As for the last one, as I mention the host is almost completely firewalled on outgoing 

-----Original Message-----
From: Jonathan Cran [mailto:jcran () 0x0e org] 
Sent: Wednesday, June 23, 2010 5:57 PM
To: Nicolas Krassas
Cc: framework () spool metasploit com
Subject: Re: [framework] meterpreter

On Wed, Jun 23, 2010 at 7:33 AM, Nicolas Krassas <krasn () ans gr> wrote:
  I’m looking for a way to use the meterpreter as standalone tool. I 
need mostly the elevating and privilege manipulation features and I’ve 
no means for connection out of the box, also there is limited file 
access on the system. There was a portable version If I recall 
correctly but I don’t seem to be able to find it right now.

Nicolas - you may be thinking of the windows portable version which
(iirc) was never supported, and is horribly out of date now. You could also be referring to Alex Sotirov's metsvc
(http://www.phreedom.org/software/metsvc/) - this is also available in the tree now  (data/meterpreter).

another option is to use this method provided by mark baggett, then upgrade to meterpreter:
http://pauldotcom.com/2010/04/using-meterpreter-to-control-n.html -- though there are quirks to making it work 
correctly (via #metasploit):
 * use ncat.exe from the nmap project instead of nc.exe
 * edit max line length setting in scripts/spawn_meterpreter.rb to 256
 * set global / local lport to the same port that ncat is listening on




  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]