Typing `help` on any Meterpreter session will list all available commands. ```bash meterpreter > help Core Commands ============= Command Description ------- ----------- ? Help menu background Backgrounds the current session bg Alias for background bgkill Kills a background meterpreter script bglist Lists running background scripts bgrun Executes a meterpreter script as a background thread channel Displays information or control active channels close Closes a channel[...] ``` Every version of Meterpreter will have different command options, so running the `help` command is always a good idea. Commands are built-in tools available on Meterpreter. They will run on the target system *without loading any additional script* or executable files. Meterpreter will provide you with three primary categories of tools; - Built-in commands - Meterpreter tools - Meterpreter scripting If you run the help command, you will see Meterpreter commands are listed under different categories. - Core commands - File system commands - Networking commands - System commands - User interface commands - Webcam commands - Audio output commands - Elevate commands - Password database commands - Timestamp commands #### Core commands `background`: Backgrounds the current session `exit`: Terminate the Meterpreter session `guid`: Get the session GUID (Globally Unique Identifier) `help`: Displays the help menu `info`: Displays information about a Post module `irb`: Opens an interactive Ruby shell on the current session `load`: Loads one or more Meterpreter extensions `migrate`: Allows you to migrate Meterpreter to another process `run`: Executes a Meterpreter script or Post module `sessions`: Quickly switch to another session #### File system commands `cd`: Will change directory `ls`: Will list files in the current directory (dir will also work) `pwd`: Prints the current working directory `edit`: will allow you to edit a file `cat`: Will show the contents of a file to the screen `rm`: Will delete the specified file `search`: Will search for files `upload`: Will upload a file or directory `download`: Will download a file or directory #### Networking commands `arp`: Displays the host ARP (Address Resolution Protocol) cache `ifconfig`: Displays network interfaces available on the target system `netstat`: Displays the network connections `portfwd`: Forwards a local port to a remote service `route`: Allows you to view and modify the routing table #### System commands `clearev`: Clears the event logs `execute`: Executes a command `getpid`: Shows the current process identifier `getuid`: Shows the user that Meterpreter is running as `kill`: Terminates a process `pkill`: Terminates processes by name `ps`: Lists running processes `reboot`: Reboots the remote computer `shell`: Drops into a system command shell `shutdown`: Shuts down the remote computer `sysinfo`: Gets information about the remote system, such as OS #### Others Commands `idletime`: Returns the number of seconds the remote user has been idle `keyscan_dump`: Dumps the keystroke buffer `keyscan_start`: Starts capturing keystrokes `keyscan_stop`: Stops capturing keystrokes `screenshare`: Allows you to watch the remote user's desktop in real time `screenshot`: Grabs a screenshot of the interactive desktop `record_mic`: Records audio from the default microphone for X seconds `webcam_chat`: Starts a video chat `webcam_list`: Lists webcams `webcam_snap`: Takes a snapshot from the specified webcam `webcam_stream`: Plays a video stream from the specified webcam `getsystem`: Attempts to elevate your privilege to that of local system `hashdump`: Dumps the contents of the SAM database Although all these commands may seem available under the help menu, they may not all work. For example, the target system might not have a webcam, or it can be running on a virtual machine without a proper desktop environment.