module

The EICAR Encoder

Try Surface Command
Back to search
Disclosed
N/A
Created
2018-05-30

Description

This encoder merely replaces the given payload with the EICAR test string.
Note, this is sure to ruin your payload.

Any content-aware firewall, proxy, IDS, or IPS that follows anti-virus
standards should alert and do what it would normally do when malware is
transmitted across the wire.

Author

todb todb@metasploit.com

Platform

All

Architectures

x86, x86_64, x64, mips, mipsle, mipsbe, mips64, mips64le, ppc, ppce500v2, ppc64, ppc64le, cbea, cbea64, sparc, sparc64, armle, armbe, aarch64, cmd, php, tty, java, ruby, dalvik, python, nodejs, firefox, zarch, r, riscv32be, riscv32le, riscv64be, riscv64le, loongarch64

References

Module Options

To display the available options, load the module within the Metasploit console and run the commands ‘show options’ or ‘show advanced’:


    msf > use encoder/generic/eicar
    msf encoder(eicar) > show actions
        ...actions...
    msf encoder(eicar) > set ACTION < action-name >
    msf encoder(eicar) > show options
        ...show and set options...
    msf encoder(eicar) > run
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today