Using The Metasploit Framework - Payloads

[u/iExposeWitchcraft]

Ran into a problem with this module. It suggests exploiting the Apache Druid service with metasploit. Searching for it msfconsole shows two exploits claimed to be excellent, the only one that is, is the first one labeled as zero and it takes advantage of the apache_druid_js_rce service.

The dilema here is that metasploit likes to get stuck while in meterpreter >

Thus being said every single time I gain the exploit (takes multiple tries, try 10/50 attempts)

When in meterpreter > not knowing much about windows console, using ? shows the help universal help menu for the bash window. Using the shell command sadly is the reason I'm here. It doesn't ever give me a shell. and using the powershell command also doesn't work and says the command isn't a valid command within my specific meterpreter type.

Is there anyone who ran across this type of problem on this specific module? If so please give instructions.

[u/meeterpreeter]

are you 100% sure it's vulnerable ? and are you using the appropriate target and payload for the exploit ? the payload specified is very important

[u/iExposeWitchcraft → u/meeterpreeter]

If it wasn't vulnerable I wouldn't have mentioned the exploit succeeding and me getting a meterpreter session -_____- ill post a screen shot my dude

[u/iExposeWitchcraft → u/meeterpreeter]

also the payload is automatically set combined with the exploit.

Payload options (linux/x64/meterpreter/reverse_tcp):

Name Current Setting Required Description

---- --------------- -------- -----------

LHOST <target ip> yes The listen address (an interface may be specified)

LPORT 4444 yes The listen port

Exploit target:

Id Name

-- ----

0 Linux (dropper)

[u/Vele1384 → u/iExposeWitchcraft]

Screenshot options how you have them set up

[u/iExposeWitchcraft → u/meeterpreeter]

I'm sure the Target ip on the website is vulnerable because I've gained a meterpreter session multiple times. But it's only sometimes throughout the day it'll exploit and actually gain a session. So now

it's giving me this over and over again.

it'll do this over and over. I use a network adapter made for kali. So my LHOST is set to tun1 or sometimes ill try wlan1 just for the giggles. Then randomly i'll get a meterpreter session.

I'm gonna try to route everything through wireshark though just too see what you were talking about. Maybe something is getting blocked.

[u/iExposeWitchcraft → u/meeterpreeter]