module

TFTP Fetch, Linux dup2 Command Shell, Bind TCP Stager

Disclosed
N/A
Created
2025-02-20

Description

Fetch and execute an ARMLE payload from a TFTP server.
dup2 socket in r12, then execve.

Listen for a connection

Authors

Brendan Watters
Spencer McIntyre
nemo nemo@felinemenace.org

Platform

Linux

Architectures

cmd

Module Options

To display the available options, load the module within the Metasploit console and run the commands ‘show options’ or ‘show advanced’:


msf > use payload/cmd/linux/tftp/armle/shell/bind_tcp
msf payload(bind_tcp) > show actions
...actions...
msf payload(bind_tcp) > set ACTION < action-name >
msf payload(bind_tcp) > show options
...show and set options...
msf payload(bind_tcp) > run

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.