Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Docs/update cmdstager #17842

Merged
merged 3 commits into from Apr 3, 2023
Merged

Conversation

bwatters-r7
Copy link
Contributor

This is an update for the cmdstager documentation. It adds examples, clearer descriptions, and goes into more depth in the how-to guide and deletes certutil from the list of cmdstager flavors that require SRVHOST and SRVPORT.
Yes, certutil does allow us to fetch a payload from an http server, that's not how we use certutils: https://github.com/rapid7/rex-exploitation/blob/c0b3b64d1a8f5b85a5d1bd0660f2a44590dd5f8f/lib/rex/exploitation/cmdstager/certutil.rb#L38
With the certutil cmdstager, we echo the payload into a file as a certificate then use certutil to decode it; I don't see anywhere that we use certutil to download a payload. I also added that info to the certutil description in the how-to docs because I was pretty sure we downloaded the payload using certutil, too.
Honestly, when I did a deeper dive a while back, I was pretty shocked most of the non-fetch based cmdstagers just used echo. It's there in the code, but I tried to hammer that point home in the docs.

@adfoster-r7
Copy link
Contributor

@bwatters-r7 That PR #17849 is merged now; If you rebase against master, this PR should go green now 🤞

@adfoster-r7 adfoster-r7 merged commit 05d9e7f into rapid7:master Apr 3, 2023
30 checks passed
@bwatters-r7
Copy link
Contributor Author

Fixes #9209

@adfoster-r7
Copy link
Contributor

Release Notes

Updates the How to use command stagers documentation with additional examples and clearer descriptions

@bwatters-r7 bwatters-r7 deleted the docs/update_cmdstager branch April 3, 2023 20:41
@jmartin-tech jmartin-tech added the rn-documentation release notes for Metasploit Framework documentation label Apr 7, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
docs rn-documentation release notes for Metasploit Framework documentation
Projects
Archived in project
Development

Successfully merging this pull request may close these issues.

None yet

3 participants