Feature #527

Add ability for MSFPayload to include Meterpreter scripts in build

Added by Rob Fuller about 2 years ago. Updated 4 months ago.

Status:Rejected Start date:11/16/2009
Priority:Normal Due date:
Assignee:HD Moore % Done:

0%

Category:meterpreter - win32
Target version:-
Resolution:wontfix How To Use:
Release Note:

Description

Basically it does the actions prescribed in the meterpreter script and bottles any output into a post-run stager. Sort of like a resource file for meterpreter.

History

Updated by HD Moore about 2 years ago

This would depend on an embedded ruby interpreter and the supporting scripts

Updated by James Lee about 2 years ago

You can kinda do this with AutoRunScript. Just "set AutoRunScript migrate" when setting up your multi/handler and it will do what you expect.

To have that sort of functionality embedded in the payload itself requires two things. First, we need a standalone (unstaged) meterpreter. That's not too much trouble and we've thought about doing it anyway. Second, we need an entire scripting language embedded in the payload as well. This is not so easy. One possible option is embedding something like tinyrb (http://code.macournoyer.com/tinyrb/). Of course, being small, tinyrb has serious limitations on what scripts it will run.

Such an endeavor is certainly not impossible, indeed it would be incredibly cool, but it requires a pretty hefty overhaul of meterpreter.

Updated by James Lee over 1 year ago

  • Target version changed from Metasploit 3.4.0 to Metasploit 3.4.1

Updated by James Lee over 1 year ago

  • Target version changed from Metasploit 3.4.1 to Open Backlog

This is still a monumental undertaking. Pushing indefinitely.

Updated by James Lee over 1 year ago

  • Target version changed from Open Backlog to Metasploit 3.5.0

Updated by James Lee over 1 year ago

  • Target version deleted (Metasploit 3.5.0)

Yeah, not gonna happen in this release.

Updated by Tod Beardsley 4 months ago

  • Status changed from New to Rejected
  • Resolution set to wontfix
  • 10 set to 0

Just use AutoRunScripts, or even better, post modules and an rc file.

Also available in: Atom PDF