Windows Disable Windows ICF, Command Shell, Bind TCP Inline
Disable the Windows ICF, then listen for a connection and spawn a command shell
Rank
- Normal
Authors
- Lin0xx < lin0xx [at] metasploit.com >
Similar Modules
- payload/windows/adduser
- payload/windows/dllinject/bind_ipv6_tcp
- payload/windows/dllinject/bind_nonx_tcp
- payload/windows/dllinject/bind_tcp
- payload/windows/dllinject/find_tag
- payload/windows/dllinject/reverse_http
- payload/windows/dllinject/reverse_ipv6_http
- payload/windows/dllinject/reverse_ipv6_tcp
- payload/windows/dllinject/reverse_nonx_tcp
- payload/windows/dllinject/reverse_ord_tcp
Usage Information
$ msfconsole
## ### ## ##
## ## #### ###### #### ##### ##### ## #### ######
####### ## ## ## ## ## ## ## ## ## ## ### ##
####### ###### ## ##### #### ## ## ## ## ## ## ##
## # ## ## ## ## ## ## ##### ## ## ## ## ##
## ## #### ### ##### ##### ## #### #### #### ###
##
msf > use payload/windows/shell_bind_tcp_xpfw
msf payload(shell_bind_tcp_xpfw) > generate
## ### ## ##
## ## #### ###### #### ##### ##### ## #### ######
####### ## ## ## ## ## ## ## ## ## ## ### ##
####### ###### ## ##### #### ## ## ## ## ## ## ##
## # ## ## ## ## ## ## ##### ## ## ## ## ##
## ## #### ### ##### ##### ## #### #### #### ###
##
msf > use payload/windows/shell_bind_tcp_xpfw
msf payload(shell_bind_tcp_xpfw) > generate
Module Options
| EXITFUNC | Exit technique: none, thread, process, seh (default: process) |
| LPORT | The listen port (default: 4444) |
| RHOST | The target address (default: ) |
| AutoRunScript | A script to run automatically on session creation. |
| InitialAutoRunScript | An initial script to run on session creation (before AutoRunScript) |
| VERBOSE | Enable detailed status messages |
| WORKSPACE | Specify the workspace for this module |