Re: inline meterpreter payload

[Jonathan Cran <jcran () pentestify com>]

On Tue, Sep 11, 2012 at 4:04 PM, Richard Miles <
richard.k.miles () googlemail com> wrote:

> Hi,
>
> So everytime that meterpreter is executed a .dll is transfered? Is this
> metsrv.dll static on the Metasploit tree? If yes, why the AVs do not detect
> it easily every time? Is this DLL loaded directly from memory (never
> touching the disk) by the stager1?
http://www.harmonysecurity.com/files/HS-P005_ReflectiveDllInjection.pdf

_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework