Metasploit mailing list archives
Meterpreter + SSL
From: jabra at spl0it.org (Jabra)
Date: Fri, 26 Jun 2009 19:36:01 -0400
HDM FTW!!!!!!!!!!!!!!!!!!!!!!!!!!!!! On 26.Jun.2009 06:24PM -0500, HD Moore wrote:
The meterpreter payload in the SVN trunk (3.3-dev) now uses SSL by default. Any staging activities (including the upload of metsrv.dll) will still be in cleartext, but all meterpreter communications are now protected by SSL automatically. This SSL mode does NO verification, so its still possible for someone to MITM the session, but this buys some privacy-by-default. -HD _______________________________________________ https://mail.metasploit.com/mailman/listinfo/framework
-- Jabra < jabra at spl0it.org > http://www.spl0it.org
Current thread:
- Meterpreter + SSL HD Moore (Jun 26)
- Meterpreter + SSL Jabra (Jun 26)