Home page logo
/

metasploit logo Metasploit mailing list archives

Re: meterpreter flaky
From: k41zen <k41zen () me com>
Date: Wed, 05 Dec 2012 15:57:17 +0000

Have created a meterpreter/reverse_tcp exe and upload this to the same target in an effort to gain persistence through 
the "run persistence" command instead of metsvc. Listener is all good but when I execute the .exe on the target 
metasploit sits there saying "Sending Stage" and sits there forever.

Any ideas?

On 5 Dec 2012, at 11:46, Matt Gardenghi <mtgarden () gmail com> wrote:

As I recall metsvc is depreciated. Try "run persistence" instead.

Matt Gardenghi

On Dec 5, 2012, at 6:39, k41zen <k41zen () me com> wrote:

Grateful for any help someone can offer on this please.

I've successfully got a meterpreter/metsvc_bind_tcp service running on a Windows7 host, however, I can rarely 
interact with the session. AV and the FW are disabled. When I connect and execute commands such as ls and ps I 
receive the error "Unknown Command".

Sometimes when I connect, the metsvc-server.exe crashes. Restarting the metsvc service on the target and 
reconnecting doesn't seem to make a difference. Rebooting the target and starting my msfconsole session from scratch 
makes little difference too. Uninstalling the service with "metsvc remove-service" and re-installing with "metsvc 
install-service" makes also no difference.

I tried something completely different last night and created a new payload via a USB stick and executed that. This 
gave me a meterpreter/reverse_tcp shell and through that I was then able to install the service again using "run 
metsvc". I instantly connected and could interact with the session without issue. However I came in this morning and 
have exactly the same issues of "Unknown command".

Can anyone help?



_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework

_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]