Windows Meterpreter (Reflective Injection), Find Tag Ordinal Stager
Use an established connection, Inject the meterpreter server DLL via the Reflective Dll Injection payload (staged)
Rank
- Normal
Authors
- skape < mmiller [at] hick.org >
- sf < stephen_fewer [at] harmonysecurity.com >
Vulnerability References
Similar Modules
- payload/windows/meterpreter/bind_ipv6_tcp
- payload/windows/meterpreter/bind_nonx_tcp
- payload/windows/meterpreter/bind_tcp
- payload/windows/meterpreter/reverse_http
- payload/windows/meterpreter/reverse_https
- payload/windows/meterpreter/reverse_ipv6_http
- payload/windows/meterpreter/reverse_ipv6_https
- payload/windows/meterpreter/reverse_ipv6_tcp
- payload/windows/meterpreter/reverse_nonx_tcp
- payload/windows/meterpreter/reverse_ord_tcp
Usage Information
$ msfconsole
## ### ## ##
## ## #### ###### #### ##### ##### ## #### ######
####### ## ## ## ## ## ## ## ## ## ## ### ##
####### ###### ## ##### #### ## ## ## ## ## ## ##
## # ## ## ## ## ## ## ##### ## ## ## ## ##
## ## #### ### ##### ##### ## #### #### #### ###
##
msf > use payload/windows/meterpreter/find_tag
msf payload(find_tag) > generate
## ### ## ##
## ## #### ###### #### ##### ##### ## #### ######
####### ## ## ## ## ## ## ## ## ## ## ### ##
####### ###### ## ##### #### ## ## ## ## ## ## ##
## # ## ## ## ## ## ## ##### ## ## ## ## ##
## ## #### ### ##### ##### ## #### #### #### ###
##
msf > use payload/windows/meterpreter/find_tag
msf payload(find_tag) > generate
Module Options
| EXITFUNC | Exit technique: none, seh, process, thread (default: process) |
| AutoLoadStdapi | Automatically load the Stdapi extension |
| AutoRunScript | A script to run automatically on session creation. |
| AutoSystemInfo | Automatically capture system information on initialization. |
| EnableUnicodeEncoding | Automatically encode UTF-8 strings as hexadecimal |
| InitialAutoRunScript | An initial script to run on session creation (before AutoRunScript) |
| TAG | The four byte tag to signify the connection. |
| VERBOSE | Enable detailed status messages |
| WORKSPACE | Specify the workspace for this module |
