module

VNC Server (Reflective Injection), Windows Reverse HTTP Stager (winhttp)

Disclosed
N/A
Created
2018-05-30

Description

Inject a VNC Dll via a reflective loader (staged).

Tunnel communication over HTTP (Windows winhttp)

Authors

sf stephen_fewer@harmonysecurity.com
hdm x@hdm.io
Borja Merino bmerinofe@gmail.com

Platform

Windows

Architectures

x86

Module Options

To display the available options, load the module within the Metasploit console and run the commands ‘show options’ or ‘show advanced’:


msf > use payload/windows/vncinject/reverse_winhttp
msf payload(reverse_winhttp) > show actions
...actions...
msf payload(reverse_winhttp) > set ACTION < action-name >
msf payload(reverse_winhttp) > show options
...show and set options...
msf payload(reverse_winhttp) > run

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.