module

Windows Drive Formatter

Disclosed
N/A
Created
May 30, 2018

Description

This payload formats all mounted disks in Windows (aka ShellcodeOfDeath).

After formatting, this payload sets the volume label to the string specified in
the VOLUMELABEL option. If the code is unable to access a drive for any reason,
it skips the drive and proceeds to the next volume.

Authors

Ashfaq Ansari ashfaq_ansari1989@hotmail.com
Ruei-Min Jiang mike820324@gmail.com

Platform

Windows

Architectures

x86

Module Options

To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced':


msf > use payload/windows/format_all_drives
msf payload(format_all_drives) > show actions
...actions...
msf payload(format_all_drives) > set ACTION < action-name >
msf payload(format_all_drives) > show options
...show and set options...
msf payload(format_all_drives) > run

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.