Updated Meterpreter Wishlist (markdown)

This commit is contained in:
HD Moore
2015-03-25 10:43:33 -05:00
parent be49bc5635
commit 2d2cfdfd01
+1
View File
@@ -91,6 +91,7 @@ Related open tickets (slightly broader than Meterpreter):
* Scatterbomb: Persistence is difficult, and making sure your session doesnt die because you chose the wrong process to migrate into or the user exited that process because the PDF looked hung. This would work by attempting OpenProcess on every process or a select list of processes and inject Meterpreter threads into them. But it would rely on the Mutex feature so that only one would be calling back at a time. Basically allowing for a resilient semi-persistent Meterpreter session that would save you from yourself when you accidentally type exit on the Meterpreter> prompt instead of your other terminal
* Mutex checking binary exports: This follows up with the scatterbomb but essentially when installing persistence as a pentester I only install one because installing more than one would raise the noise level of a compromised host. If the binary/callback would check a mutex before doing anything and looping based on a timeout that even better.
* OLE / Office Controls: This is basically an open ended feature request asking for support of for Office, mostly Outlook (like read newest emails, search email, etc).
* Configurable character set conversation for Shell sessions and channels. When spawning a windows shell from meterpreter, on a host that uses a German version of windows, all the special characters (e.g. öäü) are broken, i.e. they are either not rendered at all, or replaced with that default "character not found" unicode character. Forcing the terminal emulator to use cp850 made it work for now.
### Metepreter Stager Support