4170 matches found
Microsoft SQL Server Payload Execution via SQL Injection
This module will execute an arbitrary payload on a Microsoft SQL Server, using a SQL injection vulnerability. Once a vulnerability is identified this module will use xpcmdshell to upload and execute Metasploit payloads. It is necessary to specify the exact point where the SQL injection...
Microsoft SQL Server Database Link Crawling Command Execution
This module can be used to crawl MS SQL Server database links and deploy Metasploit payloads through links configured with sysadmin privileges using a valid SQL Server Login. If you are attempting to obtain multiple reverse shells using this module we recommend setting the "DisablePayloadHandler"...
Microsoft Windows Authenticated User Code Execution
This module uses a valid administrator username and password or password hash to execute an arbitrary payload. This module is similar to the "psexec" utility provided by SysInternals. This module is now able to clean up after itself. The service created by this tool uses a randomly chosen name an...
Windows Command Shell Upgrade (Powershell)
This module executes Powershell to upgrade a Windows Shell session to a full Meterpreter session. Module Options msf use exploit/windows/local/powershell/cmdupgrade msf undefinedcmdupgrade show actions ...actions... msf undefinedcmdupgrade set ACTION msf undefinedcmdupgrade show options ...show a...
PsExec via Current User Token
This module uploads an executable file to the victim system, creates a share containing that executable, creates a remote service on each target system using a UNC path to that file, and finally starts the services. The result is similar to psexec but with the added benefit of using the session's...
Windows Management Instrumentation (WMI) Remote Command Execution
This module executes powershell on the remote host using the current user credentials or those supplied. Instead of using PSEXEC over TCP port 445 we use the WMIC command to start a Remote Procedure Call on TCP port 135 and an ephemeral port. Set ReverseListenerComm to tunnel traffic through that...
Powershell Remoting Remote Command Execution
This module uses Powershell Remoting TCP 47001 to inject payloads on target machines. If RHOSTS are specified, it will try to resolve the IPs to hostnames, otherwise use a HOSTFILE to supply a list of known hostnames. Module Options msf use exploit/windows/local/powershell/remoting msf...
PowerShell v7.3.2 (x64)
PowerShell v7.3.2 x64...
PowerShell LTS v7.2.10 (x64)
PowerShell LTS v7.2.10 x64...
PowerShell LTS v7.2.11 (x64)
PowerShell LTS v7.2.11 x64...
PowerShell v7.3.4 (x64)
PowerShell v7.3.4 x64...
PowerShell LTS v7.2.12 (x64)
PowerShell LTS v7.2.12 x64...
PowerShell v7.3.5 (x64)
PowerShell v7.3.5 x64...
PowerShell LTS v7.2.13 (x64)
PowerShell LTS v7.2.13 x64...
PowerShell LTS v7.2.14 (x64)
PowerShell LTS v7.2.14 x64...
PowerShell v7.3.7 (x64)
PowerShell v7.3.7 x64...
PowerShell v7.3.8 (x64)
PowerShell v7.3.8 x64...
PowerShell LTS v7.2.16 (x64)
PowerShell LTS v7.2.16 x64...