module

Reflective DLL Injection, Windows Reverse HTTP Stager (winhttp)

Disclosed
N/A
Created
2018-05-30

Description

Inject a DLL via a reflective loader.

Tunnel communication over HTTP (Windows winhttp)

Authors

sf stephen_fewer@harmonysecurity.com
hdm x@hdm.io
Borja Merino bmerinofe@gmail.com

Platform

Windows

Architectures

x86

Module Options

To display the available options, load the module within the Metasploit console and run the commands ‘show options’ or ‘show advanced’:


msf > use payload/windows/dllinject/reverse_winhttp
msf payload(reverse_winhttp) > show actions
...actions...
msf payload(reverse_winhttp) > set ACTION < action-name >
msf payload(reverse_winhttp) > show options
...show and set options...
msf payload(reverse_winhttp) > run

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.