{"action":"created","issue":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/8621","repository_url":"https://api.github.com/repos/rapid7/metasploit-framework","labels_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/8621/labels{/name}","comments_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/8621/comments","events_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/8621/events","html_url":"https://github.com/rapid7/metasploit-framework/issues/8621","id":238720301,"node_id":"MDU6SXNzdWUyMzg3MjAzMDE=","number":8621,"title":"Meterpreter continuity","user":{"login":"Viss","id":1756255,"node_id":"MDQ6VXNlcjE3NTYyNTU=","avatar_url":"https://avatars0.githubusercontent.com/u/1756255?v=4","gravatar_id":"","url":"https://api.github.com/users/Viss","html_url":"https://github.com/Viss","followers_url":"https://api.github.com/users/Viss/followers","following_url":"https://api.github.com/users/Viss/following{/other_user}","gists_url":"https://api.github.com/users/Viss/gists{/gist_id}","starred_url":"https://api.github.com/users/Viss/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Viss/subscriptions","organizations_url":"https://api.github.com/users/Viss/orgs","repos_url":"https://api.github.com/users/Viss/repos","events_url":"https://api.github.com/users/Viss/events{/privacy}","received_events_url":"https://api.github.com/users/Viss/received_events","type":"User","site_admin":false},"labels":[{"id":213102939,"node_id":"MDU6TGFiZWwyMTMxMDI5Mzk=","url":"https://api.github.com/repos/rapid7/metasploit-framework/labels/enhancement","name":"enhancement","color":"5319e7","default":true},{"id":103443960,"node_id":"MDU6TGFiZWwxMDM0NDM5NjA=","url":"https://api.github.com/repos/rapid7/metasploit-framework/labels/meterpreter","name":"meterpreter","color":"5319e7","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":4,"created_at":"2017-06-27T02:24:52Z","updated_at":"2018-07-16T20:57:59Z","closed_at":null,"author_association":"NONE","body":"On a live engagement, for a client that is a 100% mac shop, I've started encountering continuity issues with meterpreter (the python implementation, specifically).\r\n\r\nI've noticed that people will shut their macs, go to another office, or to their homes or elsewhere, and re-open them - and meterpreter attempts to re-establish the connection. \r\n\r\nThe short way of describing what happens is \"metasploit doesn't like that\". I see a bunch of traffic via tcpdump, the shells do not ever come back to life, and this causes meterpreter on the target machine to die since it loses comms and all the timeouts occur. I end up losing shells :(\r\n\r\nI wonder if it would be interesting to slightly modify how meterpreter operates, in that the source IP of the staged meterpreter process not be a static element - whereby if someone vpns up, or goes to a coffee shop - or otherwise they move locations and their ip changes - meterpreter can somehow intelligently deal with this. "},"comment":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/comments/405379777","html_url":"https://github.com/rapid7/metasploit-framework/issues/8621#issuecomment-405379777","issue_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/8621","id":405379777,"node_id":"MDEyOklzc3VlQ29tbWVudDQwNTM3OTc3Nw==","user":{"login":"fsacer","id":2059352,"node_id":"MDQ6VXNlcjIwNTkzNTI=","avatar_url":"https://avatars0.githubusercontent.com/u/2059352?v=4","gravatar_id":"","url":"https://api.github.com/users/fsacer","html_url":"https://github.com/fsacer","followers_url":"https://api.github.com/users/fsacer/followers","following_url":"https://api.github.com/users/fsacer/following{/other_user}","gists_url":"https://api.github.com/users/fsacer/gists{/gist_id}","starred_url":"https://api.github.com/users/fsacer/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/fsacer/subscriptions","organizations_url":"https://api.github.com/users/fsacer/orgs","repos_url":"https://api.github.com/users/fsacer/repos","events_url":"https://api.github.com/users/fsacer/events{/privacy}","received_events_url":"https://api.github.com/users/fsacer/received_events","type":"User","site_admin":false},"created_at":"2018-07-16T20:57:59Z","updated_at":"2018-07-16T20:57:59Z","author_association":"CONTRIBUTOR","body":"afaik this has been fixed for some time now, close @busterb "}}
{"actor":{"display_login":"fsacer"}}