rapid7/metasploit-framework — pull request #2004 by mwulftange (2013-06-21 23:27:19+00:00)
Title: Use CmdStagerVBS instead of CmdStagerTFTP

By using `php.exe` as stager, the bad characters can be completely bypassed. This allows the use of the CmdStagerVBS, which should be working on all supported Windows systems.