ID MSF:PAYLOAD/GENERIC/SHELL_REVERSE_TCP
Type metasploit
Reporter Rapid7
Modified 2017-07-24T13:26:21
Description
Connect back to attacker and spawn a command shell
##
# This module requires Metasploit: https://metasploit.com/download
# Current source: https://github.com/rapid7/metasploit-framework
##
require 'msf/core/payload/generic'
require 'msf/core/handler/reverse_tcp'
module MetasploitModule
CachedSize = 0
include Msf::Payload::Single
include Msf::Payload::Generic
def initialize(info = {})
super(merge_info(info,
'Name' => 'Generic Command Shell, Reverse TCP Inline',
'Description' => 'Connect back to attacker and spawn a command shell',
'Author' => 'skape',
'License' => MSF_LICENSE,
'Handler' => Msf::Handler::ReverseTcp,
'Session' => Msf::Sessions::CommandShell
))
end
end
{"id": "MSF:PAYLOAD/GENERIC/SHELL_REVERSE_TCP", "type": "metasploit", "bulletinFamily": "exploit", "title": "Generic Command Shell, Reverse TCP Inline", "description": "Connect back to attacker and spawn a command shell\n", "published": "2006-08-26T02:13:25", "modified": "2017-07-24T13:26:21", "cvss": {"score": 0.0, "vector": "NONE"}, "href": "", "reporter": "Rapid7", "references": [], "cvelist": [], "lastseen": "2020-08-27T05:58:42", "viewCount": 354, "enchantments": {"score": {"value": 0.6, "vector": "NONE", "modified": "2020-08-27T05:58:42", "rev": 2}, "dependencies": {"references": [{"type": "carbonblack", "idList": ["CARBONBLACK:D8F177C71ED7193B2BE394503D8DC4C2"]}, {"type": "malwarebytes", "idList": ["MALWAREBYTES:5B399D59CF91A861E1E5FF10923687F2"]}, {"type": "mssecure", "idList": ["MSSECURE:8F3E6CE08786178A57BEC93818B0A4A1"]}, {"type": "rst", "idList": ["RST:09A6E900-E8E2-3F95-8044-B8F6A3C0A578", "RST:07B2E39A-66F7-3860-9CBA-47096DD3D6EE", "RST:47FEBAC4-9A89-3110-823B-8DEC9A044D0D", "RST:1B0A9D78-E7D5-36CB-8C8B-EE919F7119EE", "RST:41F36F6C-DE32-3833-A8CF-4C0797DA3524", "RST:F013681C-37AE-3364-88B5-32B9FBA04F3D", "RST:0A5B7E6E-1776-38AB-9E0B-7D71DD0D1B2F", "RST:566917E9-969E-3925-A333-10821C6B2237", "RST:AB9A2581-B5D6-3C74-BFA9-BF3BD709D402", "RST:9548B9FE-F20C-3556-A6A2-2A6791216526"]}], "modified": "2020-08-27T05:58:42", "rev": 2}, "vulnersScore": 0.6}, "sourceHref": "https://github.com/rapid7/metasploit-framework/blob/master//modules/payloads/singles/generic/shell_reverse_tcp.rb", "sourceData": "##\n# This module requires Metasploit: https://metasploit.com/download\n# Current source: https://github.com/rapid7/metasploit-framework\n##\n\nrequire 'msf/core/payload/generic'\nrequire 'msf/core/handler/reverse_tcp'\n\nmodule MetasploitModule\n\n CachedSize = 0\n\n include Msf::Payload::Single\n include Msf::Payload::Generic\n\n def initialize(info = {})\n super(merge_info(info,\n 'Name' => 'Generic Command Shell, Reverse TCP Inline',\n 'Description' => 'Connect back to attacker and spawn a command shell',\n 'Author' => 'skape',\n 'License' => MSF_LICENSE,\n 'Handler' => Msf::Handler::ReverseTcp,\n 'Session' => Msf::Sessions::CommandShell\n ))\n end\nend\n", "metasploitReliability": "", "metasploitHistory": ""}
{"rst": [{"lastseen": "2021-01-22T00:00:00", "bulletinFamily": "ioc", "cvelist": [], "description": "Found **77[.]8.150.64** in [RST Threat Feed](https://www.rstcloud.net/profeed) with score **20**.\n First seen: 2020-12-23T03:00:00, Last seen: 2021-01-22T03:00:00.\n IOC tags: **generic**.\nASN 6805: (First IP 77.0.0.0, Last IP 77.15.255.255).\nASN Name \"TDDEASN1\" and Organisation \"\".\nASN hosts 15536 domains.\nGEO IP information: City \"Hamburg\", Country \"Germany\".\n[https://rstcloud.net/](https://rstcloud.net/)", "edition": 1, "modified": "2020-12-23T00:00:00", "id": "RST:9F88ED7B-186E-3DF0-B5DC-06AF1307F421", "href": "", "published": "2021-01-23T00:00:00", "title": "RST Threat feed. IOC: 77.8.150.64", "type": "rst", "cvss": {}}, {"lastseen": "2021-01-22T00:00:00", "bulletinFamily": "ioc", "cvelist": [], "description": "Found **77[.]10.21.102** in [RST Threat Feed](https://www.rstcloud.net/profeed) with score **21**.\n First seen: 2020-12-26T03:00:00, Last seen: 2021-01-22T03:00:00.\n IOC tags: **generic**.\nASN 6805: (First IP 77.0.0.0, Last IP 77.15.255.255).\nASN Name \"TDDEASN1\" and Organisation \"\".\nASN hosts 15536 domains.\nGEO IP information: City \"Bad Bramstedt\", Country \"Germany\".\n[https://rstcloud.net/](https://rstcloud.net/)", "edition": 1, "modified": "2020-12-26T00:00:00", "id": "RST:80586499-5DA5-3C5F-A3F2-27714C2446E2", "href": "", "published": "2021-01-23T00:00:00", "title": "RST Threat feed. IOC: 77.10.21.102", "type": "rst", "cvss": {}}, {"lastseen": "2021-01-22T00:00:00", "bulletinFamily": "ioc", "cvelist": [], "description": "Found **77[.]10.27.123** in [RST Threat Feed](https://www.rstcloud.net/profeed) with score **21**.\n First seen: 2020-12-25T03:00:00, Last seen: 2021-01-22T03:00:00.\n IOC tags: **generic**.\nASN 6805: (First IP 77.0.0.0, Last IP 77.15.255.255).\nASN Name \"TDDEASN1\" and Organisation \"\".\nASN hosts 15536 domains.\nGEO IP information: City \"Hamburg\", Country \"Germany\".\n[https://rstcloud.net/](https://rstcloud.net/)", "edition": 1, "modified": "2020-12-25T00:00:00", "id": "RST:EA9721E7-560A-343C-8FAB-D1ABCE8D29C6", "href": "", "published": "2021-01-23T00:00:00", "title": "RST Threat feed. IOC: 77.10.27.123", "type": "rst", "cvss": {}}, {"lastseen": "2021-01-22T00:00:00", "bulletinFamily": "ioc", "cvelist": [], "description": "Found **77[.]10.80.130** in [RST Threat Feed](https://www.rstcloud.net/profeed) with score **31**.\n First seen: 2021-01-01T03:00:00, Last seen: 2021-01-22T03:00:00.\n IOC tags: **generic**.\nASN 6805: (First IP 77.0.0.0, Last IP 77.15.255.255).\nASN Name \"TDDEASN1\" and Organisation \"\".\nASN hosts 15536 domains.\nGEO IP information: City \"Hamburg\", Country \"Germany\".\n[https://rstcloud.net/](https://rstcloud.net/)", "edition": 1, "modified": "2021-01-01T00:00:00", "id": "RST:AA41F014-2359-3A09-BCF3-E701A9747577", "href": "", "published": "2021-01-23T00:00:00", "title": "RST Threat feed. IOC: 77.10.80.130", "type": "rst", "cvss": {}}, {"lastseen": "2021-01-22T00:00:00", "bulletinFamily": "ioc", "cvelist": [], "description": "Found **77[.]10.86.112** in [RST Threat Feed](https://www.rstcloud.net/profeed) with score **21**.\n First seen: 2020-12-26T03:00:00, Last seen: 2021-01-22T03:00:00.\n IOC tags: **generic**.\nASN 6805: (First IP 77.0.0.0, Last IP 77.15.255.255).\nASN Name \"TDDEASN1\" and Organisation \"\".\nASN hosts 15536 domains.\nGEO IP information: City \"Hamburg\", Country \"Germany\".\n[https://rstcloud.net/](https://rstcloud.net/)", "edition": 1, "modified": "2020-12-26T00:00:00", "id": "RST:1200E235-DEDE-304E-A9DC-DA84EF8FE113", "href": "", "published": "2021-01-23T00:00:00", "title": "RST Threat feed. IOC: 77.10.86.112", "type": "rst", "cvss": {}}, {"lastseen": "2021-01-22T00:00:00", "bulletinFamily": "ioc", "cvelist": [], "description": "Found **77[.]10.179.63** in [RST Threat Feed](https://www.rstcloud.net/profeed) with score **20**.\n First seen: 2020-12-23T03:00:00, Last seen: 2021-01-22T03:00:00.\n IOC tags: **generic**.\nASN 6805: (First IP 77.0.0.0, Last IP 77.15.255.255).\nASN Name \"TDDEASN1\" and Organisation \"\".\nASN hosts 15536 domains.\nGEO IP information: City \"Hamburg\", Country \"Germany\".\n[https://rstcloud.net/](https://rstcloud.net/)", "edition": 1, "modified": "2020-12-23T00:00:00", "id": "RST:16A96AA5-CE7D-3446-B67C-8AE292364215", "href": "", "published": "2021-01-23T00:00:00", "title": "RST Threat feed. IOC: 77.10.179.63", "type": "rst", "cvss": {}}, {"lastseen": "2021-01-22T00:00:00", "bulletinFamily": "ioc", "cvelist": [], "description": "Found **77[.]10.160.103** in [RST Threat Feed](https://www.rstcloud.net/profeed) with score **40**.\n First seen: 2021-01-16T03:00:00, Last seen: 2021-01-22T03:00:00.\n IOC tags: **generic**.\nASN 6805: (First IP 77.0.0.0, Last IP 77.15.255.255).\nASN Name \"TDDEASN1\" and Organisation \"\".\nASN hosts 15536 domains.\nGEO IP information: City \"Hamburg\", Country \"Germany\".\n[https://rstcloud.net/](https://rstcloud.net/)", "edition": 1, "modified": "2021-01-16T00:00:00", "id": "RST:4EDF3884-5CA5-31BB-84C9-0C55754C24F4", "href": "", "published": "2021-01-23T00:00:00", "title": "RST Threat feed. IOC: 77.10.160.103", "type": "rst", "cvss": {}}, {"lastseen": "2021-01-22T00:00:00", "bulletinFamily": "ioc", "cvelist": [], "description": "Found **77[.]10.219.109** in [RST Threat Feed](https://www.rstcloud.net/profeed) with score **21**.\n First seen: 2020-12-26T03:00:00, Last seen: 2021-01-22T03:00:00.\n IOC tags: **generic**.\nASN 6805: (First IP 77.0.0.0, Last IP 77.15.255.255).\nASN Name \"TDDEASN1\" and Organisation \"\".\nASN hosts 15536 domains.\nGEO IP information: City \"Hamburg\", Country \"Germany\".\n[https://rstcloud.net/](https://rstcloud.net/)", "edition": 1, "modified": "2020-12-26T00:00:00", "id": "RST:5D0138D7-92E8-3299-B251-4EFFFB928504", "href": "", "published": "2021-01-23T00:00:00", "title": "RST Threat feed. IOC: 77.10.219.109", "type": "rst", "cvss": {}}, {"lastseen": "2021-01-22T00:00:00", "bulletinFamily": "ioc", "cvelist": [], "description": "Found **77[.]11.156.159** in [RST Threat Feed](https://www.rstcloud.net/profeed) with score **21**.\n First seen: 2020-12-26T03:00:00, Last seen: 2021-01-22T03:00:00.\n IOC tags: **generic**.\nASN 6805: (First IP 77.0.0.0, Last IP 77.15.255.255).\nASN Name \"TDDEASN1\" and Organisation \"\".\nASN hosts 15536 domains.\nGEO IP information: City \"Magdeburg\", Country \"Germany\".\n[https://rstcloud.net/](https://rstcloud.net/)", "edition": 1, "modified": "2020-12-26T00:00:00", "id": "RST:2E831205-4CBF-33D1-B98E-3350C0F40164", "href": "", "published": "2021-01-23T00:00:00", "title": "RST Threat feed. IOC: 77.11.156.159", "type": "rst", "cvss": {}}, {"lastseen": "2021-01-22T00:00:00", "bulletinFamily": "ioc", "cvelist": [], "description": "Found **77[.]11.253.178** in [RST Threat Feed](https://www.rstcloud.net/profeed) with score **21**.\n First seen: 2020-12-26T03:00:00, Last seen: 2021-01-22T03:00:00.\n IOC tags: **generic**.\nASN 6805: (First IP 77.0.0.0, Last IP 77.15.255.255).\nASN Name \"TDDEASN1\" and Organisation \"\".\nASN hosts 15536 domains.\nGEO IP information: City \"Berlin\", Country \"Germany\".\n[https://rstcloud.net/](https://rstcloud.net/)", "edition": 1, "modified": "2020-12-26T00:00:00", "id": "RST:B8F91493-72A9-3FEE-8174-11F139F8A7E8", "href": "", "published": "2021-01-23T00:00:00", "title": "RST Threat feed. IOC: 77.11.253.178", "type": "rst", "cvss": {}}]}
