Metasploit mailing list archives

Meterpreter Sniffer module

From: hdm at metasploit.com (HD Moore)
Date: Sat, 11 Jul 2009 10:31:21 -0500

On Sat, 11 Jul 2009 10:25:19 -0500, xyberpix <xyberpix at xyberpix.com> wrote:

np, I was using windows/browser/ms06_055_vml_method.

I'll keep doing some more tests over the weekend though and keep you  
updated, as I'm really keen on this module.



It looks like the sniffer initialization fails with some exploits and not  
others; if you migrate to a new process, everthing works peachy again. The  
annoying thing about this bug is that after attaching a debugger, it works  
fine...

-HD

Current thread:

Meterpreter Sniffer module HD Moore (Jul 11)
- Meterpreter Sniffer module xyberpix (Jul 11)
  - Meterpreter Sniffer module HD Moore (Jul 11)
    - Meterpreter Sniffer module xyberpix (Jul 11)
    - Meterpreter Sniffer module HD Moore (Jul 11)
  - Meterpreter Sniffer module Carlos Perez (Jul 11)
    - Meterpreter Sniffer module xyberpix (Jul 11)
  - Meterpreter Sniffer module Carlos Perez (Jul 11)
- Meterpreter Sniffer module HD Moore (Jul 11)
  - Meterpreter Sniffer module xyberpix (Jul 12)
  - Meterpreter Sniffer module jep (Jul 13)
    - Meterpreter Sniffer module HD Moore (Jul 13)