Metasploit Penetration Testing Framework

Java JSP Command Shell, Bind TCP Inline

Listen for a connection and spawn a command shell

Rank

Normal

Authors

sf < stephen_fewer [at] harmonysecurity.com >

Similar Modules

Usage Information

$ msfconsole

                ##                          ###           ##    ##
##  ##  #### ###### ####  #####   #####    ##    ####        ######
####### ##  ##  ##  ##         ## ##  ##    ##   ##  ##   ###   ##
####### ######  ##  #####   ####  ##  ##    ##   ##  ##   ##    ##
## # ##     ##  ##  ##  ## ##      #####    ##   ##  ##   ##    ##
##   ##  #### ###   #####   #####     ##   ####   ####   #### ###
                                      ##

msf > use payload/java/jsp_shell_bind_tcp
msf payload(jsp_shell_bind_tcp) > generate

Module Options

LPORT	The listen port (default: 4444)
RHOST	The target address (default: )
SHELL	The system shell to use. (default: cmd.exe)
AutoRunScript	A script to run automatically on session creation.
InitialAutoRunScript	An initial script to run on session creation (before AutoRunScript)
WORKSPACE	Specify the workspace for this module

OSVDB:	CVE:
BID:	MSB:
TEXT: