Back to search

Poison Ivy 2.1.x C2 Buffer Overflow

This module exploits a stack buffer overflow in the Poison Ivy 2.1.x C&C server. The exploit does not need to know the password chosen for the bot/server communication.

Free Metasploit Download

Get your copy of the world's leading penetration testing tool

Download Now

Module Name

exploit/windows/misc/poisonivy_21x_bof

Authors

Jos Wetzels

References

URL: http://samvartaka.github.io/exploitation/2016/06/03/dead-rats-exploiting-malware

Targets

Poison Ivy 2.1.4 on Windows XP SP3

Platforms

windows

Reliability

Normal

Development

Module Options

To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced':


      msf > use exploit/windows/misc/poisonivy_21x_bof
      msf exploit(poisonivy_21x_bof) > show targets
            ...targets...
      msf exploit(poisonivy_21x_bof) > set TARGET <target-id>
      msf exploit(poisonivy_21x_bof) > show options
            ...show and set options...
      msf exploit(poisonivy_21x_bof) > exploit

Vulnerability & Exploit Database