Windows Manage Download and/or Execute
This module will download a file by importing urlmon via railgun. The user may also choose to execute the file with arguments via exec_string.
Rank
- Normal
Authors
- RageLtMan < >
Development
Similar Modules
- post/windows/manage/add_user_domain
- post/windows/manage/autoroute
- post/windows/manage/delete_user
- post/windows/manage/enable_rdp
- post/windows/manage/inject_ca
- post/windows/manage/inject_host
- post/windows/manage/migrate
- post/windows/manage/multi_meterpreter_inject
- post/windows/manage/nbd_server
- post/windows/manage/payload_inject
Usage Information
$ msfconsole
## ### ## ##
## ## #### ###### #### ##### ##### ## #### ######
####### ## ## ## ## ## ## ## ## ## ## ### ##
####### ###### ## ##### #### ## ## ## ## ## ## ##
## # ## ## ## ## ## ## ##### ## ## ## ## ##
## ## #### ### ##### ##### ## #### #### #### ###
##
msf > use post/windows/manage/download_exec
msf post(download_exec) > set SESSION [INTEGER]
msf post(download_exec) > set URL [STRING]
## ### ## ##
## ## #### ###### #### ##### ##### ## #### ######
####### ## ## ## ## ## ## ## ## ## ## ### ##
####### ###### ## ##### #### ## ## ## ## ## ## ##
## # ## ## ## ## ## ## ##### ## ## ## ## ##
## ## #### ### ##### ##### ## #### #### #### ###
##
msf > use post/windows/manage/download_exec
msf post(download_exec) > set SESSION [INTEGER]
msf post(download_exec) > set URL [STRING]
Module Options
| DOWNLOAD_PATH | Full path for downloaded file |
| EXECUTE | Execute file after completion |
| FILENAME | Name for downloaded file |
| OUTPUT | Show execution output (default: true) |
| SESSION | The session to run this module on. |
| URL | Full URL of file to download |
| DELETE | Delete file after execution |
| EXEC_STRING | Execution parameters when run from download directory |
| EXEC_TIMEOUT | Execution timeout |
| VERBOSE | Enable detailed status messages |
| WORKSPACE | Specify the workspace for this module |
