Meterpreter Opened Session with 2 Random IP's

Nov 13, 2017 02:22 PM

Hello! I started yesterday studying about Meterpreter, so, I did the payload.exe to send to a test machine using port 444. I did everything right, and when I opened the payload.exe in the test machine, It was all right, but then, suddenly, a new session with an IP from Russia started.

So, my test machine was session 1 and this session from Russia was 2. Some time later, another session with an IP from USA started, I was able to access all machines, but how is this possible? Only the test machine had the payload.exe.

I checked the test machine for viruses, malware and other things but seems to be all fine.

These IP's from Russia and USA seems to be some kind of servers, I did a portscan and some ports like 443 or 22 are opened, but I'm not sure what happened. Can you help me to understand what was these 2 connections?

Just updated your iPhone? You'll find new Apple Intelligence capabilities, sudoku puzzles, Camera Control enhancements, volume control limits, layered Voice Memo recordings, and other useful features. Find out what's new and changed on your iPhone with the iOS 18.2 update.

Related Articles

637263493835297420.jpg

How to Use Zero-Width Characters to Hide Secret Messages in Text (& Even Reveal Leaks)

636455706472146367.jpg

How to Hide DDE-Based Attacks in MS Word

Comments

No Comments Exist

Be the first, drop a comment!