SecurityTube

Description: This is Part 2 of the Security Metasploit Framework Expert (SMFE) course material. You can begin by watching Part 1 here: http://www.securitytube.net/video/2556 . You can sign up for the course here http://www.securitytube.net/smfe Enjoy!

In this video, we will look at the basics of Meterpreter - how it uses reflective DLL injection to stay in-memory, communicates over encrypted channels, uses TLV for communication which allows for multi-channel communication and a bunch of other things.

Please do leave your comments behind!

Tags: meterpreter , basics , smfe , securitytube , certification , vivek ,

Comments:

• Learnit on Thu 08 Dec 2011
  
  Thanks Vivek :)
  
  I posted a question on video 2, you might missed it, here it is again .
  
  I've just went through Metasploit Mega-Primer,
  
  In the Port-Forwarding Section:
  
  You stated that we want to create the listening port on the local machine(BTrack) so why you are executing the "portfwd add" command on Server 1's meterpreter ?
  
  Cheerz :)
• pentest on Thu 08 Dec 2011
  
  Please don't hesitate to reply for this...
  
  I am very successful in in vmware regarding the metasploit
  
  but i couldn't launch attack on the public ip
  
  like 117.x.x.x .... Pls help me frnds.
• 3lL060 on Thu 08 Dec 2011
  
  nice Vivek :)
  can´t wait for the next video.
  its like a relaxation to watch your videos und hacking around with this stuff while you explaining it.
  Go on. :)
• zerocool394 on Thu 08 Dec 2011
  
  With this material sure many people will take the certification ... Awesome job Vivek
• ringneckparrot on Thu 08 Dec 2011
  
  @Vivek-Ramachandran
  
  Ok, what can I say, another awesome video, but I have two questions about the video series
  
  1. Will there be any video that will teach us how to write meterpreter plugins and exploits (for metasploit)
  
  I have read some guides on writing the exploits as a metasploit module (metasploit unleashed and the Pentesters Guide) but I would really like to see them as a video and especially from you ( ofcourse it's as high quality as these ones :) )
  
  2. Are the older video series supported yet ?
  
  I mean, if there are supported , I can make some exploitation videos (examples like the Minishare and the FreeSSHd ones, **with voice** )
  Local exploitation (control EIP, jmp ESP / SEH) but another example is always useful, at least this is my opinion :)
  
  Anyways, it would be an honor for me to make a video for your Exploit Research Primer (If you also want so)
  
  
  
  Thanks,
  ringneckparrot
• hexcondor on Thu 08 Dec 2011
  
  outstanding Vivek!!!..very useful..
• Forseti on Thu 08 Dec 2011
  
  :) Nice speed on this haha, wouldnt have time for my primary studies now!
  
  As I'm new in this 'community' where can I find a website with the latest exploit that are known?
• edojawa on Thu 08 Dec 2011
  
  Thanks for your time, what about per-configured victim for download for the lap, from where i can get something like that
• ringneckparrot on Fri 09 Dec 2011
  
  @Forseti
  
  Well, first of all welcome to ghe community :p , and exploit-db.com has some, not the newest (i think) but you can check the metasploit blog and the mcafee tread feed :)
• oncee on Fri 09 Dec 2011
  
  Another great video Vivek. Looking forward to seeing the rest of the course.
• d3crypt0R on Fri 09 Dec 2011
  
  Nice Video Vivek. Very good & Simple intro to Meterpreter
• d4lt3r.12 on Fri 09 Dec 2011
  
  DLL Injection Video: http://www.securitytube.net/video/801
  
  For Download: If Vivek gives permission in commenting Below i will post the video download link (for those who dont know from where they can download that video)
  
  Cool, But I thought this time this video series will be fresh one....
  
  
  
  Request to Vivek:
  
  Please add one slide of atleast 2 exercises to be performed after video by student.
• Forseti on Fri 09 Dec 2011
  
  @ringneckparrot
  
  Cheers will be taking a look!
• n1tr0g3n_0x1d3 on Sat 10 Dec 2011
  
  Thanks for the videos once again Vivek! You are the best at teaching info sec and we all encourage you to keep making more and help us all learn the skills you posses : )
• lionofislam on Sun 11 Dec 2011
  
  Can I download this video using IDM?
• rahuld on Sun 11 Dec 2011
  
  I would like to know more about the intrusion detection systems in wireless lan and various techniques that are best suited for home or corporate use. I would be really happy if you could give some details about the intrusion detection system. or just point me towards the reference study material.
• j0k3rr on Tue 13 Dec 2011
  
  @pentest im making a video tutorial now will upload it on vimeo. check out my vimeo or secuirtytube later once i give them the link
• j0k3rr on Tue 13 Dec 2011
  
  @lionofislam yea IDM works for me ;)
• j0k3rr on Tue 13 Dec 2011
  
  @pentest it will be up in about 2 hours link http://vimeo.com/33604474
  
  peace and good luck
• j0k3rr on Wed 14 Dec 2011
  
  @vivek thanks a lot! been watchin ur videos learned so much. Im guessing the best way to pentest is use a DLL injection that helps bypass Anti Virus's due to it running in memory thats out of reach of Anti viruses and best payloads are reverse that helps bypass firewalls?
• k47hm4ndu on Wed 14 Dec 2011
  
  @jok3rr -- kudos for your effort. Keep up the good work! Would love to see more from you. :-)
  
  @Vivek, great going.. When can we get to watch the upcoming episodes?
• Simo2081 on Fri 16 Dec 2011
  
  Awesome Video's Vivek, Can't wait for the next one. Do you have a timescales for the next videos?
  
  Now back to my Tea...:>)
• steve on Tue 20 Dec 2011
  
  Hi Vivek! really nice work there,soon i hope i'll join the certification programme!.. I have a problem doing the exploits on service pack 2 windows machine.Exploit completed but no session created..
• steve on Thu 22 Dec 2011
  
  im using the above exploits in a xp sp2 windows system and it crashes the win32 generic process in the target system. The attacker machine gives message " exploit completed but no session created". Any ideas guys. The target machine has no updates but service pack 2 and i have used reverse_tcp, bind_tcp e.t.c
• no_covers on Sat 24 Dec 2011
  
  Vivek: I know this is a little off subject, However i was wondering if you or someone else could recomend some free or low cost software to produce videos on a PC. I use XP,Vista and & and variouse machiness.
  thank folks. and Vivek you provide a great service to the community.
• Vishaljpatel1987 on Wed 28 Dec 2011
  
  Hello Vivek,
  
  Sorry to say but wait became excessive..
  
  When you release SMFE videos series????
• Vivek-Ramachandran on Sun 01 Jan 2012
  
  Dear Friends,
  
  Thanks for all the comments! and wish you all a Happy New Year :)
  
  Here is Part 4 of the SMFE Course - Metasploit Organization
  
  http://www.securitytube.net/video/2635
  
  Enjoy!
• Saddam on Tue 28 Feb 2012
  
  hey can any tell me How to Download this Video?
• Warbook on Sat 10 Mar 2012
  
  @Steve "show targets" this is your specific exploit list of OS targets with their respective leanguajes, select your OS leanguaje "set TARGET [number]".
  
  Maybe youre running an exploit than cant be used within a specific OS leanguaje.
• Sysguru on Fri 30 Mar 2012
  
  Thank you for the great video, I learned a lot!
• zxshockaxz on Sun 29 Jul 2012
  
  @Vivek
  
  I have just started working my way through your SMFE videos. I wanted to see how the free course overview went before taking the certification course.
  Part 1 and part 2 worked wonderfully just as they did in your video. now when i set my payload to the window/meterpreter/reverse_tcp and run the exploit, it tells me "exploit completed but no session was created."
  Is caused by my error, or do i need to set up something differently?
• Daytona on Wed 17 Oct 2012
  
  Thanks Vivek,
  
  Ik hope you include Amitage somewhere in these video's.
  I'm one of those lazy guys who like Guids. :-)
  
  Best regards.
  
  Daytona
• MattR on Sat 22 Dec 2012
  
  Hi, I was trying to do this with my own computer as well, but I keep getting an "Access Denied". Can someone tell me what's wrong and how to fix it?
  
  Also, when I try to use a different [Victim IP[Test]], I keep getting "Connection Timed Out."
  Is there someone who can help me and explain to me what I am doing wrong?
  
  For direct contact, please email Mratt27@hotmail.com or I can check here periodically.
  
  Thank You!
  
  ~Matt
• velvet.juliet on Sat 29 Dec 2012
  
  Hi vivek, I am currently watching your video 4. For a beginner like me, your videos are very useful material. I want to know more about Metasploit. Can you suggest me a book which explains metasploit clearly, in-depth?
• DieEierKaupf on Tue 13 Aug 2013
  
  great tut vivek. i am very new at this and wondered how it is that you decide which exploit to use? if the system is patched is it just trial and error until success? what would be the best approach?

Login to post a comment