Meterpreter reverse_https website

Question

When I make a a meterpreter connection with reverse https how do I change the website that appears when someone types my ip and LURI to the browser?

score 1 · Answer 1 · answered Sep 27 '16 at 04:09

now I think i understand.

you are trying to change 'It works!' to something else? You want to change the content.

You would set HttpUnknownRequestResponse to something different.

If you type these commands when you generate your payload it might work:

use payload/meterpreter/reverse_https
show advanced

You will see option HttpUnknownRequestResponse. This is set to:

<html><body><h1>It works!</h1></body></html>

You can either change this here, or if you are generating an html payload that people browse to, you can edit it in the output html file

I hope that is what you are looking for.

Yes, but where is the output html located? – pedro santos Sep 27 '16 at 15:05 — pedro santos, Sep 27 '16 at 15:05

score 0 · Answer 2 · answered Sep 27 '16 at 02:59

0

I'm not sure I understand the question.

If you want to host a web browser on port 80, you can start an apache service that listens and hosts content.

If you are listening on 443 with your meterpreter reverse_https you really can't host content if someone tries to browse to your website on https

let me know if that is not what you were looking for.

answered Sep 27 '16 at 02:59

standarduser

When I start the listener on a local network, it sets up a website with this format: http://192.168.1.109:port/LURI. And I put that on the browser's adress bar it just shows a string saying "It Works!", I was wondering if I can change that – pedro santos Sep 27 '16 at 03:13
can you post how you're starting your listener? This will help in troubleshooting your issue. – standarduser Sep 27 '16 at 03:20
I start it normally, this is just a feature from the reverse_http/s meterpreter payload – pedro santos Sep 27 '16 at 03:26

2 Answers2