MeterPwrShell – Automated Tool That Generate The Perfect Powershell Payload
Automated Tool That Generate A Powershell Oneliner That Can Create Meterpreter Shell On Metasploit,Bypass AMSI,Bypass Firewall,Bypass UAC,And Bypass Any AVs.
This tool is powered by Metasploit-Framework and amsi.fail
Notes
- NEVER UPLOAD THE PAYLOAD THAT GENERATED BY THIS PROGRAM TO ANY ONLINE SCANNER
- NEVER USE THIS PROGRAM FOR MALICIOUS PURPOSE
- SPREADING THE PAYLOAD THAT GENERATED BY THIS PROGRAM IS NOT COOL
- ANY DAMAGE GENERATED BY THIS PROGRAM IS NOT MY (As the program maker) RESPONSIBILTY!!!
- If you have some feature recommendation,post that on Issue
- If you have some issue with the program,try redownloading it again (trust me),cause sometimes i edit the release and fix it without telling
- If you want to know how tf my payload bypass any AVs,you can check on this and this
- Dont even try to fork this repository,you’ll dont get the releases!
Features (v1.5.1)
- Bypass UAC
- Automatic Migrate (using PrependMigrate)
- Built-in GetSYSTEM (if u use the Bypass UAC option)
- Disable All Firewall Profile (if u use the Bypass UAC option)
- Fully Bypass Windows Defender Real-time Protection (if you choose shortened payload or using Bypass UAC or both)
- Disable Windows Defender Security Features (if u use the Bypass UAC option)
- Fully unkillable payload
- Bypasses AMSI Successfully (if you choose shortened payload)
- Short One-Liner (if you choose shortened payload)
- Bypass Firewall (If you pick an unstaged payload)
- Great CLI
- A Lot More (Try it by yourself)
All payload features is tested on Windows 10 v20H2
Advantages Of MeterPwrShell Compared To The web_delivery Module From Metasploit Framework
- Shorter stager (Or short one-liner in this case)
- Various AMSI bypass technique and code
- Dont need to setup a server for the stager
- Support Ngrok built-in (so the victim doesnt need to be on the same local network)
- Automatic Built-in Privesc
- Easily Bypass Windows Defender
Thanks to
- Every single of my Discord Friends
- Special Thx to theia#8536 on Discord
- @FuzzySec for that awesome Masquerade PEB script
- @decoder-it for that amazing PPID Spoofing script
- Me for not dying when creating this tool
- Ed Wilson AKA Microsoft Scripting Guy for the great Powershell scripting tutorials
- and the last one is Emeric Nasi for the research on bypassing AV dynamics
Requirements
- Kali Linux,Ubuntu,Or Debian (If you dont use on of those,the tool will not work!!!)
- Metasploit Framework
- Internet Connection (Both On Victim And Attacker Computer)
Installation
apt update && apt install wget
mkdir MeterPwrShell
cd MeterPwrShell && wget https://github.com/GetRektBoy724/MeterPwrShell/releases/download/v1.5.1/meterpwrshellexec
chmod +x meterpwrshellexec
Usage
# ./meterpwrshellexec -c help
Available arguments : help, version, showbanner, showlastdebuglog, disablerootdetector, disableinternetdetector, disablealldetector
help : Show this page
version : Show MeterPwrShell's version
showbanner : Show MeterPwrShell's Banner
showlastdebuglog : Well,Its kinda self-explanatory tho
disablerootdetector : Well,Its kinda self-explanatory tho
disableinternetdetector : Well,Its kinda self-explanatory tho
disablealldetector : Disable all detector except Linux distribution detector
You also can use MeterPwrShell Without Any Flags And Arguments
Attack Vectors
- BadUSBs
- Malicious Shortcuts (lnk2pwn)
- Document Macro Payload
- MS DDE Exploit
- Extreme Way : Type it in by yourself
- Any exploit/vulns that let you execute command to victim
- Idk i have run out of idea lmao
To-do List
Available features options
- Bypass AMSI
- Shortened Payload AKA IEX WebClient method (If you use Bypass AMSI Feature)
- Bypass UAC (If you use Shortened Payload AKA IEX WebClient method)
