Vulnerability & Exploit Database

Back to search

Windows Manage Remote Packet Capture Service Starter

This module enables the Remote Packet Capture System (rpcapd service) included in the default installation of Winpcap. The module allows you to set up the service in passive or active mode (useful if the client is behind a firewall). If authentication is enabled you need a local user account to capture traffic. PORT will be used depending of the mode configured.

Free Metasploit Download

Get your copy of the world's leading penetration testing tool

 Download Now

Module Name



  • Borja Merino <bmerinofe [at]>


  • windows



Module Options

To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced':

msf > use post/windows/manage/rpcapd_start msf post(rpcapd_start) > sessions ...sessions... msf post(rpcapd_start) > set SESSION <session-id> msf post(rpcapd_start) > show options and set options... msf post(rpcapd_start) > run