Metasploit mailing list archives

Re: Dynamically Generated Final Stages


From: egypt () metasploit com
Date: Thu, 2 Sep 2010 09:05:47 -0600

If I understand you correctly, you can look at passivex for an example
of what you want.  Basically you need to tell the framework that the
final stage is not transmitted over the stager connection as with
normal stagers.  Then call generate_stage to get the final payload.

Hope this helped,
egypt

On Thu, Sep 2, 2010 at 5:10 AM,  <tyronmiller () gmail com> wrote:
Hey Philip,

Thanks for sending through the new link, as well as your response. I have
gone through the code and I don't think this was what I was after.
Appreciated anyway.

Let me see if I can be clearer in what I am after:

I have added my payload module called "awesome_payload" to my msf
installation. In msfconsole, when I type "search awesome_payload" I get the
following:

windows/dllinject/awesome_payload
windows/meterpreter/awesome_payload
windows/patchupdllinject/awesome_payload
windows/patchupmeterpreter/awesome_payload
windows/patchupvncinject/awesome_payload
windows/shell/awesome_payload
windows/upexec/awesome_payload
windows/vncinject/awesome_payload


So there are 8 possible final stages listed that the user can select. My
module/handler needs to generate the final payload based on whatever the
user specifies within msfconsole.

How do I generate the specific final stage that the user has selected within
my module? Eg, is there something like "Msf::Payload.new(payload)"?

Thanks,
Ty


On , Philip Sanderson <philip.k.sanderson () gmail com> wrote:



https://www.metasploit.com/redmine/projects/framework/repository/revisions/10202/entry/modules/payloads/stages/linux/x86/meterpreter.rb



_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework


_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework


Current thread: