pwnwiki/q — pull request #14 by nullbind (2014-01-23 17:47:03+00:00)
Title: Added MSF PSH WebShell Generator

**Added MSF PSH WebShell Generator**

This module will generate a webshell in the language defined by the "WEB_LANG" option that passes a base64 encoded PowerShell command to the Windows operating system that will execute the defined MSF payload. This can be a handy way to deliver Metasploit payloads when you have the ability to upload arbitrary files to a web server. The txt extension can also be defined in order to write the raw PowerShell command to a file for manual execution.

It was denied by the Metasploit team, because they wanted it baked into the Msf::Util::Exe. I’m sure there were other little things that they didn’t call out too. Either way it seems to work on the lab systems just fine, and we’ve used the webshell payloads in a few pentests without issue.

Since I’m lazy and most likely wont add it to Msf::Util::Exe I thought this might be a better home for it. Let me know if you think it’s a fit. If so, there is at least one other module I might send your way.

Thanks,

Scott