-
Notifications
You must be signed in to change notification settings - Fork 13.8k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Evasion Module Features #11333
Evasion Module Features #11333
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks nifty! I have some comments about the external module bits.
I could see using this to import things like obfuscators from unicorn... At first glance this appears to be mostly harness, but it could be implemented with callbacks from the core libs as a procession step, right? :) Thanks as always. |
Right on @sempervictus this is something we had in mind from the beginning. Thanks a lot for the help @zeroSteiner ! |
LGTM, landing... |
Release NotesThis enhances library support for evasion modules and adds initial scaffolding for integrating with external tools. |
This pull request makes a few tweaks and adds some convenience features for the new Evasion modules.
evasion
to_handler
command support, just like payload modules haveto_handler
, etc.Verification
Since there are no external evasion modules yet, I wrote up a quick demo to touch on each of the features. You can find it under my pastebin.com account.
~/.msf4/modules/evasion/windows/pr_demo
(creating the directory structure as necessarymsfconsole
anduse evasion/windows/pr_demo
show options
and see the default payload has been selected alreadyshow advance
and see theLOG_LEVEL
andLOG_NAME
optionsset LHOST
and hit tab and see IP addresses populate for you, select onerun
and see the module perform a dummy task of calculating the SHA value of the payloadto_handler
and see a job started with the payload configuration that was selectedDemonstration