Re: Modification of payload

[egypt () metasploit com]

Modifying the payload is going to take more assembly than ruby, but I
think you're going about it the wrong way to begin with.  An easier
solution would be to just use a meterpreter payload directly and
writing a meterpreter script to do the downloading.  In fact, there is
already a script called uploadexec.rb that does what you want. You can
even have it run automatically by setting AutoRunScript.

Hope this helped,
egypt

On Sun, Mar 14, 2010 at 11:27 AM, macubergeek <macubergeek () comcast net> wrote:
> All
>
> I'm trying to figure out how to modify the download_exec.rb payload to download and execute three different 
> executables from three hardcoded urls.
> like so:
> URL1 http://www.evil.com/binary1.exe
> URL1 http://www.evil.com/binary1.exe
> URL1 http://www.evil.com/binary1.exe
>
>
> One of the above binaries will be a metasploit generated exe to throw back a meterpreter shell to a listening handler.
>
> Since my ruby skills were somewhat poor to nonexistant I was hoping someone could offer a suggestion or two on how to 
> mod this payload?
>
> Any suggestions would be appreciated.
>
>
> Jim
>
> ~~~~~~~~~~~~~~~~~~~~~~
> ACK and you shall receive
>
> _______________________________________________
> https://mail.metasploit.com/mailman/listinfo/framework
_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework