Security Research
by Alexander Sotirov
Meterpreter service
This is a network service wrapper for the Meterpreter. It can be used as a Windows service, or run as a command line application.
Version 1.0 was released on May 29, 2007. The distribution contains source code under a BSD license.
Downloads
Compilation
You'll need GNU make and Visual C++. Go to the src directory and run make.
Installation
- Copy metsvc.exe and metsvc-server.exe from the current directory to the installation directory.
- Copy metsrv.dll from Metasploit to the installation directory.
- To register the Meterpreter as a service, go to the installation
directory and run:
metsvc.exe install-service
Usage
If you registered the Meterpreter as a Windows service, it will start automatically. Otherwise, you have to start it manually by running metsvc.exe.
Once the Meterpreter is running, you can test it using the included test.rb script. It will connect to the Meterpreter and run the sysinfo command:
$./test.rb 192.168.70.12 31337 * Initializing Meterpreter * Loading Stdapi * System info: {"OS"=>"Windows XP (Build 2600, Service Pack 2).", "Computer"=>"VM-WINXPPRO"} * Closing socket
Uninstallation
If you registered the Meterpreter as a Windows service, you need to stop it and remove the service by running:
metsvc.exe remove-service
Then simply delete all files.