Meterpreter Literacy
High-level: meterpreter as session type — concepts only, $LAB RoE.
Visual · msf_meterpreter_literacy
Meterpreter = feature-rich session type. Not a full attack cookbook. Original Cyberlium.
Know what it is called — not every post module by heart.
Meterpreter is an advanced session payload family offering channels for lab exercises: file transfer concepts, routing concepts, privilege context. Cyberlium teaches list/interact literacy and defender signals — not a step-by-step exfiltration playbook on real hosts.
1. What defenders see
Unusual process injection, new outbound pipes, DLL loads — EDR fodder.
Session type in sessions -l may say meterpreter — log that in lab reports.
Command guide
Try these commands — What defenders see
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
Meterpreter — https://docs.rapid7.com/metasploit/meterpreter-overview/ MITRE C2 — https://attack.mitre.org/tactics/TA0011/
═══ INSTALL ═══
Linux (Debian/Ubuntu): Kali: preinstalled, or: sudo apt install metasploit-framework
macOS: Prefer Kali/Linux VM — brew install metasploit (heavy)
Windows: Use Kali VM or WSL with metasploit-framework — not raw Windows host
═══ LINUX / macOS ═══
Command — copy this
msfconsole -q -x 'search type:payload name:meterpreter; info 0; exit' 2>/dev/null || echo 'Meterpreter literacy on YOUR lab VM only'
Primary tools to practice this lesson: msfconsole. Reference sites: Meterpreter (https://docs.rapid7.com/metasploit/meterpreter-overview/); MITRE C2 (https://attack.mitre.org/tactics/TA0011/). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Literacy bounds
help in session shows commands — read categories, do not run destructive modules on $LAB without brief.
No pivot from $LAB to host LAN or internet targets.
3. Pair with modules taxonomy
Post modules run after session — Module 9 covers post literacy.
Meterpreter is not persistence — Module 9 refuses real persistence.
4. What you ship: meterpreter one-paragraph literacy
Session type defined. Defender signals named. No stranger targets.
5. What you record before the next lesson
Paragraph + two defender signals.
6. Wrong vs right: stranger hosts vs YOUR lab VM
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
- Wrong: Treat meterpreter help as permission for café pivoting.
- Right: High-level literacy. Next: session hygiene.
Mission: meterpreter literacy blurb
1) Define meterpreter as session type. 2) Name two defender signals. 3) Write no-pivot rule.
Stuck? Ask Cyberlium AI Mentor
Ask Mentor: “Meterpreter vs plain shell session?”
APPLY: Meterpreter is:
APPLY: True or False: Full exfil cookbook on real hosts is in scope.
APPLY: EDR may flag:
Session Hygiene
Part of Metasploit Framework — Sessions and Meterpreter.
Sessions Lab
Part of Metasploit Framework — Sessions and Meterpreter.
Quiz — Sessions and Meterpreter
Part of Metasploit Framework — Sessions and Meterpreter.