Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

disable reverse_http methods from upexec and shell payloads #4906

Merged
merged 1 commit into from Mar 11, 2015
Merged

disable reverse_http methods from upexec and shell payloads #4906

merged 1 commit into from Mar 11, 2015

Conversation

bcook-r7
Copy link
Contributor

The windows shell and upexec stages don't work over http/https as far back as I could test. They appear to have inherited this trait by accident.

To verify

  • Check that msfvenom does not show shell reverse_http/s payloads for windows
$ ./msfvenom -l |awk '/windows.*reverse_http/ {print $1}'
windows/dllinject/reverse_http
windows/dllinject/reverse_http_proxy_pstore
windows/meterpreter/reverse_http
windows/meterpreter/reverse_http_proxy_pstore
windows/meterpreter/reverse_https
windows/meterpreter/reverse_https_proxy
windows/vncinject/reverse_http
windows/vncinject/reverse_http_proxy_pstore
windows/x64/meterpreter/reverse_https
windows/x64/vncinject/reverse_https

disable reverse_http methods from upexec and shell payloads
9ade107 
These don't work over http and don't appear to have ever, as far back as
I could test. They appear to be an accident perhaps.
@wvu wvu assigned wvu and hdm and unassigned wvu Mar 10, 2015
@wvu
Copy link
Contributor

wvu commented Mar 11, 2015

Yeh, specs need updatin'.

@hdm hdm merged commit 9ade107 into rapid7:master Mar 11, 2015
hdm pushed a commit that referenced this pull request Mar 11, 2015
Lands #4906 and fixes #4905 by updating Conventions for HTTP incompat…
02c7461 
…ible payloads
@bcook-r7
Copy link
Contributor Author

Thanks guys for helping clear up the mystery!

@bcook-r7 bcook-r7 deleted the disable-http-payloads branch April 28, 2015 02:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees

@hdm hdm

Labels
bug payload
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
3 participants
@bcook-r7 @wvu @hdm