https://souljian.cn/tags/meterpreter/Recent content in Meterpreter on SoulJian小站Hugo -- gohugo.ioen-usSun, 30 Aug 2026 10:00:00 +0800https://souljian.cn/p/751088147/Sat, 29 Aug 2026 14:00:00 +0800https://souljian.cn/p/751088147/<h2 id="写在前面合法学习边界">写在前面：合法学习边界 </h2><p>Metasploit 只在授权测试环境使用。对非授权目标进行攻击可能触犯法律。</p> <h2 id="一metasploit-攻击流程">一、Metasploit 攻击流程 </h2><img src="https://souljian.cn/img/msfconsole-flow.svg" alt="Metasploit 攻击流程" /> <div class="highlight"><div class="chroma"> <table class="lntable"><tr><td class="lntd"> <pre tabindex="0" class="chroma"><code><span class="lnt">1 </span></code></pre></td> <td class="lntd"> <pre tabindex="0" class="chroma"><code class="language-text" data-lang="text"><span class="line"><span class="cl">① 信息收集 → ② 选择 EXP → ③ 配置参数 → ④ 执行攻击 → ⑤ 获取会话 </span></span></code></pre></td></tr></table> </div> </div><h2 id="二常用命令">二、常用命令 </h2><div class="highlight"><div class="chroma"> <table class="lntable"><tr><td class="lntd"> <pre tabindex="0" class="chroma"><code><span class="lnt">1 </span><span class="lnt">2 </span><span class="lnt">3 </span><span class="lnt">4 </span><span class="lnt">5 </span><span class="lnt">6 </span><span class="lnt">7 </span></code></pre></td> <td class="lntd"> <pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"><span class="line"><span class="cl">msfconsole -q <span class="c1"># 启动</span> </span></span><span class="line"><span class="cl">search tomcat <span class="c1"># 搜索漏洞</span> </span></span><span class="line"><span class="cl">use exploit/... <span class="c1"># 选择 EXP</span> </span></span><span class="line"><span class="cl"><span class="nb">set</span> RHOSTS 192.168.1.1 <span class="c1"># 设置目标</span> </span></span><span class="line"><span class="cl"><span class="nb">set</span> PAYLOAD ... <span class="c1"># 设置载荷</span> </span></span><span class="line"><span class="cl">exploit <span class="c1"># 执行</span> </span></span><span class="line"><span class="cl">sessions -l <span class="c1"># 查看会话</span> </span></span></code></pre></td></tr></table> </div> </div><h2 id="三meterpreter-常用命令">三、Meterpreter 常用命令 </h2><div class="highlight"><div class="chroma"> <table class="lntable"><tr><td class="lntd"> <pre tabindex="0" class="chroma"><code><span class="lnt">1 </span><span class="lnt">2 </span><span class="lnt">3 </span><span class="lnt">4 </span></code></pre></td> <td class="lntd"> <pre tabindex="0" class="chroma"><code class="language-text" data-lang="text"><span class="line"><span class="cl">sysinfo · getsystem · upload · download </span></span><span class="line"><span class="cl">portfwd add -l 8080 -p 80 </span></span><span class="line"><span class="cl">run autoroute -s 192.168.1.0/24 </span></span><span class="line"><span class="cl">run persistence -U -i 5 -p 4444 </span></span></code></pre></td></tr></table> </div> </div><h2 id="四小结">四、小结 </h2><p>Metasploit 是渗透测试核心框架。掌握 search/use/set/exploit 四步曲 + Meterpreter 会话管理，可完成从漏洞发现到权限维持的完整攻击链。</p>