Metasploit mailing list archives
checkvm script problem?
From: "Sherif Eldeeb" <archeldeeb () gmail com>
Date: Sat, 24 Apr 2010 16:56:18 +0300
Checkvm script is identifying machines that has vmware *installed* on them as VMs... @Carlos: Multiscript is now working fine & I love your work :), thank you for being there for us... ============================================================================ ====== msf exploit(handler) > [*] Sending stage (748032 bytes) to 192.168.1.1 [*] Meterpreter session 1 opened (192.168.1.9:443 -> 192.168.1.1:6589) msf exploit(handler) > sessions -i 1 [*] Starting interaction with 1... meterpreter > run multiscript -c "checkvm" [*] Running Multiscript script..... [*] Running script List ... [*] running script checkvm [*] Checking if target is a Virtual Machine ..... [*] This is a VMware Virtual Machine meterpreter > run checkvm [*] Checking if target is a Virtual Machine ..... [*] This is a VMware Virtual Machine meterpreter > [*] Sending stage (748032 bytes) to 192.168.1.1 [*] Meterpreter session 2 opened (192.168.1.9:443 -> 192.168.1.1:7516) meterpreter > background msf exploit(handler) > sessions -i 2 [*] Starting interaction with 2... meterpreter > run checkvm [*] Checking if target is a Virtual Machine ..... [*] It appears to be physical host. meterpreter > ============================================================================ ====== Even though both sessions came from physical machines, the first one is identified as a VM, it has VMware workstation installed on it "Vista Business SP2 x86", and the other one is correctly assumed to be physical since it does not have VMware installed "Windows server 2k3 x86". Thanks in advance.. Sherif _______________________________________________ https://mail.metasploit.com/mailman/listinfo/framework
Current thread:
- checkvm script problem? Sherif Eldeeb (Apr 24)
- Re: checkvm script problem? Carlos Perez (Apr 24)