Metasploit mailing list archives

(no subject)


From: wfdawson at bellsouth.net (wfdawson at bellsouth.net)
Date: Fri, 10 Jul 2009 00:33:09 +0000

I'm having an issue with migrating to another process with the meterpreter.  I have a test WinXP system, and came at it 
a couple of different ways.  One was with a .exe created with msfpayload as mentioned in previous emails.  Another was 
with IE7 using the new msvidctl_mpeg2 exploit release this week.  In either event, I get errors when I try to migrate 
to an Explorer or any other process.  For example:

    4056  Explorer.EXE       C:\WINDOWS\Explorer.EXE                                                 

meterpreter > migrate 4056
[*] Migrating to 4056...  
SSL Error: unknown protocol /home/wdawson/Software/metasploit/framework3/lib/rex/post/meterpreter/client.rb:103:in 
`accept'/home/wdawson/Software/metasploit/framework3/lib/rex/post/meterpreter/client.rb:103:in 
`swap_sock_plain_to_ssl'/home/wdawson/Software/metasploit/framework3/lib/rex/post/meterpreter/client_core.rb:200:in 
`migrate'/home/wdawson/Software/metasploit/framework3/lib/rex/post/meterpreter/ui/console/command_dispatcher/core.rb:216:in
 `cmd_migrate'/home/wdawson/Software/metasploit/framework3/lib/rex/ui/text/dispatcher_shell.rb:234:in 
`send'/home/wdawson/Software/metasploit/framework3/lib/rex/ui/text/dispatcher_shell.rb:234:in 
`run_command'/home/wdawson/Software/metasploit/framework3/lib/rex/post/meterpreter/ui/console.rb:94:in 
`run_command'/home/wdawson/Software/metasploit/framework3/lib/rex/ui/text/dispatcher_shell.rb:196:in 
`run_single'/home/wdawson/Software/metasploit/framework3/lib/rex/ui/text/dispatcher_shell.rb:191:in 
`each'/home/wdawson/Software/metasploit/framework3/lib/rex/ui/text/dispatcher_shell.rb:191:in 
`run_single'/home/wdawson/Software/metasploit/framework3/lib/rex/post/meterpreter/ui/console.rb:60:in 
`interact'/home/wdawson/Software/metasploit/framework3/lib/rex/ui/text/shell.rb:123:in 
`call'/home/wdawson/Software/metasploit/framework3/lib/rex/ui/text/shell.rb:123:in 
`run'/home/wdawson/Software/metasploit/framework3/lib/rex/post/meterpreter/ui/console.rb:58:in 
`interact'/home/wdawson/Software/metasploit/framework3/lib/msf/base/sessions/meterpreter.rb:181:in 
`_interact'/home/wdawson/Software/metasploit/framework3/lib/rex/ui/interactive.rb:48:in 
`interact'/home/wdawson/Software/metasploit/framework3/lib/msf/ui/console/command_dispatcher/core.rb:997:in 
`cmd_sessions'/home/wdawson/Software/metasploit/framework3/lib/rex/ui/text/dispatcher_shell.rb:234:in 
`send'/home/wdawson/Software/metasploit/framework3/lib/rex/ui/text/dispatcher_shell.rb:234:in 
`run_command'/home/wdawson/Software/metasploit/framework3/lib/rex/ui/text/dispatcher_shell.rb:196:in 
`run_single'/home/wdawson/Software/metasploit/framework3/lib/rex/ui/text/dispatcher_shell.rb:191:in 
`each'/home/wdawson/Software/metasploit/framework3/lib/rex/ui/text/dispatcher_shell.rb:191:in 
`run_single'/home/wdawson/Software/metasploit/framework3/lib/rex/ui/text/shell.rb:127:in `run'./msfconsole:82           
                                                                            
loading extension stdapi                                                                                
[-] Error running command migrate: undefined method `write' for nil:NilClass 
/home/wdawson/Software/metasploit/framework3/lib/rex/socket/ssl_tcp.rb:97:in 
`write'/home/wdawson/Software/metasploit/framework3/lib/rex/post/meterpreter/packet_dispatcher.rb:59:in 
`send_packet'/home/wdawson/Software/metasploit/framework3/lib/rex/post/meterpreter/packet_dispatcher.rb:92:in 
`send_packet_wait_response'/home/wdawson/Software/metasploit/framework3/lib/rex/post/meterpreter/client_core.rb:115:in 
`load_library'/home/wdawson/Software/metasploit/framework3/lib/rex/post/meterpreter/client_core.rb:157:in 
`use'/home/wdawson/Software/metasploit/framework3/lib/rex/post/meterpreter/client_core.rb:211:in 
`migrate'/home/wdawson/Software/metasploit/framework3/lib/rex/post/meterpreter/client_core.rb:209:in 
`each'/home/wdawson/Software/metasploit/framework3/lib/rex/post/meterpreter/client_core.rb:209:in 
`migrate'/home/wdawson/Software/metasploit/framework3/lib/rex/post/meterpreter/ui/console/command_dispatcher/core.rb:216:in
 `cmd_migrate'/home/wdawson/Software/metasploit/framework3/lib/rex/ui/text/dispatcher_shell.rb:234:in 
`send'/home/wdawson/Software/metasploit/framework3/lib/rex/ui/text/dispatcher_shell.rb:234:in 
`run_command'/home/wdawson/Software/metasploit/framework3/lib/rex/post/meterpreter/ui/console.rb:94:in 
`run_command'/home/wdawson/Software/metasploit/framework3/lib/rex/ui/text/dispatcher_shell.rb:196:in 
`run_single'/home/wdawson/Software/metasploit/framework3/lib/rex/ui/text/dispatcher_shell.rb:191:in 
`each'/home/wdawson/Software/metasploit/framework3/lib/rex/ui/text/dispatcher_shell.rb:191:in 
`run_single'/home/wdawson/Software/metasploit/framework3/lib/rex/post/meterpreter/ui/console.rb:60:in 
`interact'/home/wdawson/Software/metasploit/framework3/lib/rex/ui/text/shell.rb:123:in 
`call'/home/wdawson/Software/metasploit/framework3/lib/rex/ui/text/shell.rb:123:in 
`run'/home/wdawson/Software/metasploit/framework3/lib/rex/post/meterpreter/ui/console.rb:58:in 
`interact'/home/wdawson/Software/metasploit/framework3/lib/msf/base/sessions/meterpreter.rb:181:in 
`_interact'/home/wdawson/Software/metasploit/framework3/lib/rex/ui/interactive.rb:48:in 
`interact'/home/wdawson/Software/metasploit/framework3/lib/msf/ui/console/command_dispatcher/core.rb:997:in 
`cmd_sessions'/home/wdawson/Software/metasploit/framework3/lib/rex/ui/text/dispatcher_shell.rb:234:in 
`send'/home/wdawson/Software/metasploit/framework3/lib/rex/ui/text/dispatcher_shell.rb:234:in 
`run_command'/home/wdawson/Software/metasploit/framework3/lib/rex/ui/text/dispatcher_shell.rb:196:in 
`run_single'/home/wdawson/Software/metasploit/framework3/lib/rex/ui/text/dispatcher_shell.rb:191:in 
`each'/home/wdawson/Software/metasploit/framework3/lib/rex/ui/text/dispatcher_shell.rb:191:in 
`run_single'/home/wdawson/Software/metasploit/framework3/lib/rex/ui/text/shell.rb:127:in `run'./msfconsole:82

Any ideas?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.metasploit.com/pipermail/framework/attachments/20090710/b75bff13/attachment.htm>


Current thread: