[framework] Bugs in msfpayload

H D Moore hdm at metasploit.com
Wed Sep 5 08:05:08 CDT 2007


On Wednesday 05 September 2007 00:58, Nicob wrote:
> 1) Is this bug known, am I missing something ?

This is a known bug that was fixed post 3.0 (use the latest svn update and 
it should not be a problem).

> 2) Is it possible to add to the windows/adduser payload an option
> allowing to select a given group to which add the user ? Something like
> the patch posted by Jerome in May [3].

As Patrick mentioned, you can use the "exec" payload and manually enter 
the command line you wish to run, including the group name.

> 3) How to use a skeleton like [2] with a two-stages payload like
> "msfpayload windows/shell/bind_tcp C" ?

You would need to run the "multi/handler" exploit from inside metasploit3 
to connect to the payload and perform the staging.

-HD



More information about the framework mailing list