Re: Backboor with Netcat and Meterpreter

[Rob Fuller <mubix () room362 com>]

The 'upgrade' tactic for meterpreter only work on windows
(target/victim) not Linux.

--
Rob Fuller | Mubix
Certified Checkbox Unchecker
Room362.com | Hak5.org



On Fri, Jul 8, 2011 at 11:36 AM, Rafael Negron <rnegron13 () comcast net> wrote:
> Thanks for all the help... but I did not explain myself properly.
>
> all I' m trying to accomplish is a session upgrade from a basic netcat
> backdoor on Ubuntu Linux to a meterpreter session.
> Just like the post on Pauldotcom on Windows..
> http://pauldotcom.com/2010/04/using-meterpreter-to-control-n.html
>
> same thing but in Ubuntu Linux
>
> Rafael
>
>
>
>
> ________________________________
> From: "Abuse007" <abuse007 () gmail com>
> To: "Sherif El-Deeb" <archeldeeb () gmail com>
> Cc: "Rafael Negron" <rnegron13 () comcast net>, framework () spool metasploit com
> Sent: Thursday, July 7, 2011 7:14:26 PM
> Subject: Re: [framework] Backboor with Netcat and Meterpreter
>
> If you want to do this once I don't see a difference. If u want to spawn
> meterpreter multiple times and netcat to change the listening port then I
> see, but I am curious as to the why.
>
> On 08/07/2011, at 5:39 AM, Sherif El-Deeb <archeldeeb () gmail com> wrote:
>
> The -e option redirects stdin & stdout of a program over the network, this
> is not how meterpreter works.
>
> even though I wish meterpreter's executable accepts arguments "listen port",
> there is no way yet to do it.
>
> So my solution to what you're after is:
> 1- create meterpreter_bind_tcp that listens always to a port you specify
> "4444 in this example"
> 2- do port redirection using netcat, so let's say you want to connect using
> port 5555, you type 'nc -l -p 5555 -e "nc 127.0.0.1 4444"
>
> Hope you got what I mean...
> Sherif.
>
> On Jul 7, 2011 5:28 PM, "Rafael Negron" <rnegron13 () comcast net>
> wrote:_______________________________________________
> https://mail.metasploit.com/mailman/listinfo/framework
>
> _______________________________________________
> https://mail.metasploit.com/mailman/listinfo/framework
_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework