0x05 Metasploit Framework（MSF）#

1
注意内网渗透中，在执行这种操作的时候是非常容易导致你的shell断开或对方服务器崩溃的，所以说内网中的漏洞执行失败是非常正常的一件事情，因为大部分都是基于一个隧道来执行，隧道本来就不是一个很稳定的东西，然后再通过那种栈溢出，溢出的shell去执行就更离谱了，或者攻击对方漏洞的时候是针对对方的内存做操作，那内存稍微改一点点地方就很容易导致蓝屏，所以内网翻车是一件非常正常的事情

1
meterpreter > help
2

3
Core Commands
4
=============
5

6
    Command       Description
7
    -------       -----------
8
    ?             Help menu
9
    background    Backgrounds the current session
10
    bg            Alias for background
11
    bgkill        Kills a background meterpreter script
12
    bglist        Lists running background scripts
13
    bgrun         Executes a meterpreter script as a background thread
14
    channel       Displays information or control active channels
15
    close         Closes a channel
16
    detach        Detach the meterpreter session (for http/https)
17
    disable_unic  Disables encoding of unicode strings
18
    ode_encoding
19
    enable_unico  Enables encoding of unicode strings
20
    de_encoding
21
    exit          Terminate the meterpreter session
22
    get_timeouts  Get the current session timeout values
23
    guid          Get the session GUID
24
    help          Help menu
25
    info          Displays information about a Post module
26
    irb           Open an interactive Ruby shell on the current session
27
    load          Load one or more meterpreter extensions
28
    machine_id    Get the MSF ID of the machine attached to the session
29
    migrate       Migrate the server to another process
30
    pivot         Manage pivot listeners
31
    pry           Open the Pry debugger on the current session
32
    quit          Terminate the meterpreter session
33
    read          Reads data from a channel
34
    resource      Run the commands stored in a file
35
    run           Executes a meterpreter script or Post module
36
    secure        (Re)Negotiate TLV packet encryption on the session
37
    sessions      Quickly switch to another session
38
    set_timeouts  Set the current session timeout values
39
    sleep         Force Meterpreter to go quiet, then re-establish session
40
    ssl_verify    Modify the SSL certificate verification setting
41
    transport     Manage the transport mechanisms
42
    use           Deprecated alias for "load"
43
    uuid          Get the UUID for the current session
44
    write         Writes data to a channel
45

46

47
Stdapi: File system Commands
48
============================
49

50
    Command       Description
51
    -------       -----------
52
    cat           Read the contents of a file to the screen
53
    cd            Change directory
54
    checksum      Retrieve the checksum of a file
55
    cp            Copy source to destination
56
    del           Delete the specified file
57
    dir           List files (alias for ls)
58
    download      Download a file or directory
59
    edit          Edit a file
60
    getlwd        Print local working directory
61
    getwd         Print working directory
62
    lcat          Read the contents of a local file to the screen
63
    lcd           Change local working directory
64
    lls           List local files
65
    lmkdir        Create new directory on local machine
66
    lpwd          Print local working directory
67
    ls            List files
68
    mkdir         Make directory
69
    mv            Move source to destination
70
    pwd           Print working directory
71
    rm            Delete the specified file
72
    rmdir         Remove directory
73
    search        Search for files
74
    show_mount    List all mount points/logical drives
75
    upload        Upload a file or directory
76

77

78
Stdapi: Networking Commands
79
===========================
80

81
    Command       Description
82
    -------       -----------
83
    arp           Display the host ARP cache
84
    getproxy      Display the current proxy configuration
85
    ifconfig      Display interfaces
86
    ipconfig      Display interfaces
87
    netstat       Display the network connections
88
    portfwd       Forward a local port to a remote service
89
    resolve       Resolve a set of host names on the target
90
    route         View and modify the routing table
91

92

93
Stdapi: System Commands
94
=======================
95

96
    Command       Description
97
    -------       -----------
98
    clearev       Clear the event log
99
    drop_token    Relinquishes any active impersonation token.
100
    execute       Execute a command
101
    getenv        Get one or more environment variable values
102
    getpid        Get the current process identifier
103
    getprivs      Attempt to enable all privileges available to the current process
104
    getsid        Get the SID of the user that the server is running as
105
    getuid        Get the user that the server is running as
106
    kill          Terminate a process
107
    localtime     Displays the target system local date and time
108
    pgrep         Filter processes by name
109
    pkill         Terminate processes by name
110
    ps            List running processes
111
    reboot        Reboots the remote computer
112
    reg           Modify and interact with the remote registry
113
    rev2self      Calls RevertToSelf() on the remote machine
114
    shell         Drop into a system command shell
115
    shutdown      Shuts down the remote computer
116
    steal_token   Attempts to steal an impersonation token from the target process
117
    suspend       Suspends or resumes a list of processes
118
    sysinfo       Gets information about the remote system, such as OS
119

120

121
Stdapi: User interface Commands
122
===============================
123

124
    Command       Description
125
    -------       -----------
126
    enumdesktops  List all accessible desktops and window stations
127
    getdesktop    Get the current meterpreter desktop
128
    idletime      Returns the number of seconds the remote user has been idle
129
    keyboard_sen  Send keystrokes
130
    d
131
    keyevent      Send key events
132
    keyscan_dump  Dump the keystroke buffer
133
    keyscan_star  Start capturing keystrokes
134
    t
135
    keyscan_stop  Stop capturing keystrokes
136
    mouse         Send mouse events
137
    screenshare   Watch the remote user desktop in real time
138
    screenshot    Grab a screenshot of the interactive desktop
139
    setdesktop    Change the meterpreters current desktop
140
    uictl         Control some of the user interface components
141

142

143
Stdapi: Webcam Commands
144
=======================
145

146
    Command       Description
147
    -------       -----------
148
    record_mic    Record audio from the default microphone for X seconds
149
    webcam_chat   Start a video chat
150
    webcam_list   List webcams
151
    webcam_snap   Take a snapshot from the specified webcam
152
    webcam_strea  Play a video stream from the specified webcam
153
    m
154

155

156
Stdapi: Audio Output Commands
157
=============================
158

159
    Command       Description
160
    -------       -----------
161
    play          play a waveform audio file (.wav) on the target system
162

163

164
Priv: Elevate Commands
165
======================
166

167
    Command       Description
168
    -------       -----------
169
    getsystem     Attempt to elevate your privilege to that of local system.
170

171

172
Priv: Password database Commands
173
================================
174

175
    Command       Description
176
    -------       -----------
177
    hashdump      Dumps the contents of the SAM database
178

179

180
Priv: Timestomp Commands
181
========================
182

183
    Command       Description
184
    -------       -----------
185
    timestomp     Manipulate file MACE attributes