Windows Manage Inject in Memory Multiple Payloads
This module will inject in to several process a given payload and connecting to a given list of IP Addresses. The module works with a given lists of IP Addresses and process PIDs if no PID is given it will start a the given process in the advanced options and inject the selected payload in to the memory of the created module.
Rank
- Normal
Authors
- Carlos Perez < carlos_perez [at] darkoperator.com >
Development
Similar Modules
- post/windows/manage/add_user_domain
- post/windows/manage/autoroute
- post/windows/manage/delete_user
- post/windows/manage/download_exec
- post/windows/manage/enable_rdp
- post/windows/manage/inject_ca
- post/windows/manage/inject_host
- post/windows/manage/migrate
- post/windows/manage/nbd_server
- post/windows/manage/payload_inject
Usage Information
$ msfconsole
## ### ## ##
## ## #### ###### #### ##### ##### ## #### ######
####### ## ## ## ## ## ## ## ## ## ## ### ##
####### ###### ## ##### #### ## ## ## ## ## ## ##
## # ## ## ## ## ## ## ##### ## ## ## ## ##
## ## #### ### ##### ##### ## #### #### #### ###
##
msf > use post/windows/manage/multi_meterpreter_inject
msf post(multi_meterpreter_inject) > set SESSION [INTEGER]
## ### ## ##
## ## #### ###### #### ##### ##### ## #### ######
####### ## ## ## ## ## ## ## ## ## ## ### ##
####### ###### ## ##### #### ## ## ## ## ## ## ##
## # ## ## ## ## ## ## ##### ## ## ## ## ##
## ## #### ### ##### ##### ## #### #### #### ###
##
msf > use post/windows/manage/multi_meterpreter_inject
msf post(multi_meterpreter_inject) > set SESSION [INTEGER]
Module Options
| HANDLER | Start new multi/handler job on local box. |
| IPLIST | List of semicolom separated IP list. (default: 208.118.237.137) |
| LPORT | Port number for the payload LPORT variable. (default: 4444) |
| PAYLOAD | Payload to inject in to process memory (default: windows/meterpreter/reverse_tcp) |
| PIDLIST | List of semicolom separated PID list. (default: ) |
| SESSION | The session to run this module on. |
| PROCESSNAME | Description |
| VERBOSE | Enable detailed status messages |
| WORKSPACE | Specify the workspace for this module |
