Metasploit mailing list archives

Re: Meterpreter not exiting


From: Brian Seel <brian.seel () gmail com>
Date: Sun, 17 Mar 2013 17:33:34 -0400

Just realized I didnt reply all either.  Here was my reply.

@Carlos: I havent changed anything... because I figured that I was doing
something wrong instead of thinking that meterpreter had a bug. I am still
getting used to developing for metasploit...

@egypt: I figured thats what you meant. And I was looking at the C client.
I will do some poking around in the REX libraries then. But I was on a
POSIX (linux) client with a windows exe payload.


On Sat, Mar 16, 2013 at 4:44 PM, <egypt () metasploit com> wrote:

Reply fail. Also autocorrect fail. The C client is old and UNmaintained.
 ---------- Forwarded message ----------
From: <egypt () metasploit com>
Date: Mar 16, 2013 3:36 PM
Subject: Re: [framework] Meterpreter not exiting
To: "Brian Seel" <brian.seel () gmail com>
Cc:

Are you looking the C client? That code is old and maintained.

What msfconsole uses to talk to meterpreter is the ruby implementation in
lib/rex/post/. I've noticed posix meterpreter hanging around after exit,
but I haven't dug into why yet. What platform are you seeing this on?

egypt
On Mar 16, 2013 3:13 PM, "Brian Seel" <brian.seel () gmail com> wrote:

I have been doing some testing with Meterpreter recently (building an
extension), and I noticed that I ended up with a bunch of running
meterpreter payloads in the process list. I checked if I had any open
sessions, and I did not. I had been closing my sessions with the exit
command, so I looked at the code for that in the source/client. That simply
calls exit(0)... which seems like it would just exit the client of
meterpreter, but not the meterpreter server running remotely (which is what
I am seeing).

First off, am I doing something wrong? Second, is this behavior by design?

_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework


_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework


_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework

Current thread: