checkvm script problem?

["Sherif Eldeeb" <archeldeeb () gmail com>]

Checkvm script is identifying machines that has vmware *installed* on them
as VMs...


@Carlos: Multiscript is now working fine & I love your work :), thank you
for being there for us...

============================================================================
======

msf exploit(handler) >
[*] Sending stage (748032 bytes) to 192.168.1.1
[*] Meterpreter session 1 opened (192.168.1.9:443 -> 192.168.1.1:6589)

msf exploit(handler) > sessions -i 1
[*] Starting interaction with 1...

meterpreter > run multiscript -c "checkvm"
[*] Running Multiscript script.....
[*] Running script List ...
[*]     running script checkvm
[*] Checking if target is a Virtual Machine .....
[*] This is a VMware Virtual Machine
meterpreter > run checkvm
[*] Checking if target is a Virtual Machine .....
[*] This is a VMware Virtual Machine
meterpreter >   

[*] Sending stage (748032 bytes) to 192.168.1.1
[*] Meterpreter session 2 opened (192.168.1.9:443 -> 192.168.1.1:7516)
meterpreter > background
msf exploit(handler) > sessions -i 2
[*] Starting interaction with 2...

meterpreter > run checkvm
[*] Checking if target is a Virtual Machine .....
[*] It appears to be physical host.
meterpreter >
               
============================================================================
======

Even though both sessions came from physical machines, the first one is
identified as a VM, it has VMware workstation installed on it "Vista
Business SP2 x86", and the other one is correctly assumed to be physical
since it does not have VMware installed "Windows server 2k3 x86".

Thanks in advance..
Sherif


_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework