Stdapi commands not showing in meterpreter session

Information Security Asked by kreysix on January 28, 2021

I created a android payload with public IP (android/meterpreter/reverse_https).
The stdapi commands(ls,cd,webcam_snap etc) are showing when the victim is in the same network.

But when I try to connect over the Internet( i.e. victim is in a different network) using a public IP, the stdapi commands do not show in the meterpreter session.

Further, the meterpreter session is quite unstable, and displays errors after sometime:

meterpreter session is not valid and will be closed

metasploit meterpreter

One Answer

With metepreter sessions, you need to make sure you migrate to a running application. So for example, when obtaining a session for Windows you would migrate to explorer.exe

If you want to migrate, list the running applications with ps and then it will give you the list. After that, you type migrate [application PID] without the brackets. This should stop your meterpreter session is not valid and will be closed situation.

The stdapi will only be given and only load if the module is handing you administrative rights.

Answered by iZodiac on January 28, 2021

Stdapi commands not showing in meterpreter session

One Answer

Add your own answers!

Related Questions

What are the security risks of allowing users to add iframes?

FIDO2 – Where do Android and IOS platform authenticators store private key credentials?

Nginx module security

Third party cookies – does secure, httponly matter?

Emergency method to erase all data off a machine within seconds

As of 2020, is there any fix for 802.11w deadlock?

Can input value escape a JSON object?

What’s the actual danger of public key spoofing?

Why would PayPal send messages from another domain?

How should we respond to a root CA breach?

Detecting a web based MITM attack?

What is the Akamai Name Server I see for some big companies?

What are ssh-keygen best practices?

How can I safely use Get-Credential to obtain a username and password for a set period of time for use as command line arguments?

Can my physical location be detected with double VPN?

How does openvpn work for only certain servers?

If you SMS text someone, how much more information will they know about you?

An intranet web app for decrypting values : a bad idea, and if so, why?

How can a company ensure cybercriminals destroy hacked data after payment?

Security camera NVR is making my network not PCI compliant. What can I do?

Ask a Question