module

Powershell Exec, Bind TCP Stager (RC4 Stage Encryption, Metasm)

Disclosed
N/A
Created
2022-05-11

Description

Execute an x86 payload from a command via PowerShell.

Listen for a connection

Authors

Spencer McIntyre
jt jt@klake.org
skape mmiller@hick.org
hdm x@hdm.io
sf stephen_fewer@harmonysecurity.com
mihi
RageLtMan

Platform

Windows

Architectures

cmd

Module Options

To display the available options, load the module within the Metasploit console and run the commands ‘show options’ or ‘show advanced’:


msf > use payload/cmd/windows/powershell/patchupdllinject/bind_tcp_rc4
msf payload(bind_tcp_rc4) > show actions
...actions...
msf payload(bind_tcp_rc4) > set ACTION < action-name >
msf payload(bind_tcp_rc4) > show options
...show and set options...
msf payload(bind_tcp_rc4) > run

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.