Metasploit mailing list archives

meterpreter execute from memory


From: reydecopas at gmail.com (reydecopas)
Date: Tue, 3 Feb 2009 15:32:12 +0100

Hi,
I don't understand the parameters of execute command (-d -m)

This works perfect:

meterpreter > execute -f cmd.exe -H -i
Process 1220 created.
Channel 33 created.
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\admin\Desktop>


but when does it make sense to use -d and -m paremeters?
Can anyone send an example?

meterpreter > execute -h
Usage: execute -f file [options]

Executes a command on the remote machine.

OPTIONS:

    -H        Create the process hidden from view.
    -a <opt>  The arguments to pass to the command.
    -c        Channelized I/O (required for interaction).
    -d <opt>  The 'dummy' executable to launch when using -m.
    -f <opt>  The executable command to run.
    -h        Help menu.
    -i        Interact with the process after creating it.
    -m        Execute from memory.
    -t        Execute process with currently impersonated thread token




I get this error:
meterpreter > execute -f cmd.exe -H -i  -d calc.exe -m
[-] Error running command execute: No such file or directory - cmd.exe
/home/user/metasploit/lib/rex/post/meterpreter/extensions/stdapi/sys/process.rb:139:in
`initialize'/home/user/metasploit/lib/rex/post/meterpreter/extensions/stdapi/sys/process.rb:139:in
`new'/home/user/metasploit/lib/rex/post/meterpreter/extensions/stdapi/sys/process.rb:139:in
`execute'/home/user/metasploit/lib/rex/post/meterpreter/ui/console/command_dispatcher/stdapi/sys.rb:120:in
`cmd_execute'/home/user/metasploit/lib/rex/ui/text/dispatcher_shell.rb:234:in
`send'/home/user/metasploit/lib/rex/ui/text/dispatcher_shell.rb:234:in
`run_command'/home/user/metasploit/lib/rex/post/meterpreter/ui/console.rb:94:in
`run_command'/home/user/metasploit/lib/rex/ui/text/dispatcher_shell.rb:196:in
`run_single'/home/user/metasploit/lib/rex/ui/text/dispatcher_shell.rb:191:in
`each'/home/user/metasploit/lib/rex/ui/text/dispatcher_shell.rb:191:in
`run_single'/home/user/metasploit/lib/rex/post/meterpreter/ui/console.rb:60:in
`interact'/home/user/metasploit/lib/rex/ui/text/shell.rb:123:in
`call'/home/user/metasploit/lib/rex/ui/text/shell.rb:123:in
`run'/home/user/metasploit/lib/rex/post/meterpreter/ui/console.rb:58:in
`interact'/home/user/metasploit/lib/msf/base/sessions/meterpreter.rb:181:in
`_interact'/home/user/metasploit/lib/rex/ui/interactive.rb:48:in
`interact'/home/user/metasploit/lib/msf/ui/console/command_dispatcher/core.rb:918:in
`cmd_sessions'/home/user/metasploit/lib/rex/ui/text/dispatcher_shell.rb:234:in
`send'/home/user/metasploit/lib/rex/ui/text/dispatcher_shell.rb:234:in
`run_command'/home/user/metasploit/lib/rex/ui/text/dispatcher_shell.rb:196:in
`run_single'/home/user/metasploit/lib/rex/ui/text/dispatcher_shell.rb:191:in
`each'/home/user/metasploit/lib/rex/ui/text/dispatcher_shell.rb:191:in
`run_single'/home/user/metasploit/lib/msf/ui/console/command_dispatcher/exploit.rb:143:in
`cmd_exploit'/home/user/metasploit/lib/rex/ui/text/dispatcher_shell.rb:234:in
`send'/home/user/metasploit/lib/rex/ui/text/dispatcher_shell.rb:234:in
`run_command'/home/user/metasploit/lib/rex/ui/text/dispatcher_shell.rb:196:in
`run_single'/home/user/metasploit/lib/rex/ui/text/dispatcher_shell.rb:191:in
`each'/home/user/metasploit/lib/rex/ui/text/dispatcher_shell.rb:191:in
`run_single'/home/user/metasploit/lib/rex/ui/text/shell.rb:127:in
`run'./msfconsole:82
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.metasploit.com/pipermail/framework/attachments/20090203/ba30447f/attachment.htm>


Current thread: