Metasploit mailing list archives

Re: Help with POSIX meterpreter


From: egypt () metasploit com
Date: Sun, 29 Aug 2010 12:15:59 -0600

I don't have a way to test this since I haven't been able to get
meterpreter to compile on linux, but the attached payload should work
(probably).  Place it in
modules/payloads/stages/linux/x86/meterpreter.rb.  Also attached is a
modified recvrtld.asm that reads the size as a four-byte int off the
wire instead of hardcoding it.

If this doesn't work out of the box, it should at least give you a
starting point.

Hope this helps,
egypt

On Sun, Aug 29, 2010 at 3:18 AM, Philip Sanderson
<philip.k.sanderson () gmail com> wrote:
Hello,
I'd like some assistance with adding a payload for the posix meterpreter.
I would like the flow to be as follows:
- Use a standard bind/reverse payload stager. Stage the rtld staging
shellcode.
- rtld staging code (which does mmap() / read() loop, jump to entry point)
- send a specified file
I'm not sure how to go about adding that in :-)
The rtld staging code needs some information from the binary it will send.
See 
http://github.com/philip-k-sanderson/metasploit-posix-meterpreter/tree/master/external/source/meterpreter/source/server/rtld/
 elf2bin.c
and rtldtest.c
Can anyone volunteer to work out how to do it / add it in ?
- PKS


_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework


Attachment: recvrtld.asm
Description:

Attachment: meterpreter.rb
Description:

_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework

Current thread: