6

Metasploit exploits (exploits/windows/local/virtual_box_opengl_escape in specific) have an option called Session. What is this is to be set to? I am running Kali on virtual box on a Windows machine

Anuraag Baishya
  • 205
  • 1
  • 2
  • 8
  • Its a privilege escalation exploit which means you need to have a session on the target machine already established. You will then set the SESSION datastore option to the session ID you have. – void_in Nov 08 '16 at 10:22

1 Answers1

3

This is a VM escape exploit. You use it to get a shell you have in a VM to break out of the guest machine into the host machine.

If you look at the source code of the exploit it sais

'SessionTypes' => ['meterpreter'],

So that means you should give it the ID number of the meterpreter session you have.

You can see them with the command sessions -l

J.A.K.
  • 4,793
  • 13
  • 30