New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Implement TLS transport for PHP meterpreter #208

Closed
wants to merge 1 commit into
base: master
from

Conversation

Projects
None yet
2 participants
@sempervictus

sempervictus commented Jun 22, 2017

This is the payloads section of MSF #7669

Implement SSL transport via streams, atop the current version of
PHP meterpreter (with GUIDs and all).

This version does everything in a single file, relying on the MSF
payload generation component to perform string substitution in
order to convert the "connect($ipaddr, $port, $proto='tcp')" to
"function connect($ipaddr, $port, $proto='ssl')."


Note: i did something stupid to my submodules, and despite @bcook-r7's helpful suggestion still polluting the repo a bit.
Feel free to add a commit fixing this mess if you know how.

RageLtMan
Implement TLS transport for PHP meterpreter
This is the payloads section of MSF #7669

Implement SSL transport via streams, atop the current version of
PHP meterpreter (with GUIDs and all).

This version does everything in a single file, relying on the MSF
payload generation component to perform string substitution in
order to convert the "connect($ipaddr, $port, $proto='tcp')" to
"function connect($ipaddr, $port, $proto='ssl')."
@busterb

This comment has been minimized.

Show comment
Hide comment
@busterb

busterb Sep 8, 2017

Contributor

Hmm, I'll create a new PR to untangle the submodule strangeness here

Contributor

busterb commented Sep 8, 2017

Hmm, I'll create a new PR to untangle the submodule strangeness here

@sempervictus

This comment has been minimized.

Show comment
Hide comment
@sempervictus

sempervictus Sep 8, 2017

sempervictus commented Sep 8, 2017

@busterb

This comment has been minimized.

Show comment
Hide comment
@busterb

busterb Sep 8, 2017

Contributor

well, having a packet exchange that looks like a TLS exchange is still useful, especially since PHP meterpreter doesn't support reverse_https

Contributor

busterb commented Sep 8, 2017

well, having a packet exchange that looks like a TLS exchange is still useful, especially since PHP meterpreter doesn't support reverse_https

@sempervictus

This comment has been minimized.

Show comment
Hide comment
@sempervictus

sempervictus Sep 8, 2017

sempervictus commented Sep 8, 2017

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment