2

Question was once on a mailing list but wasn't answered. I want to use a custom exe as a payload in metasploit. For example when I use exploit/multi/browser/java_atomicreferencearray and want to execute my payload.exe, how can I do that?

It is possible in SET, where you can just import a custom executable.

Is it possible in Metasploit?

1 Answer 1

5

You can execute any payload file or string you like using the msfconsole with these options:

PAYLOADFILE The file to read the payload from
PAYLOADSTR  The string to use as a payload
ARCH        The architecture that is being targeted
PLATFORM    The platform that is being targeted
VERBOSE     Enable detailed status messages
WORKSPACE   Specify the workspace for this module

http://www.metasploit.com/modules/payload/generic/custom

2
  • 1
    What I did was: set PAYLOAD generic/custom set PAYLOADFILE /var/www/install.exe generate use exploit/multi/browser/java_atomicreferencearray exploit Now I get an error saying [-] Exploit failed: Could not locate a compatible payload for Java/java What am I doing wrong? Apr 27, 2012 at 22:22
  • There could be so many reasons, from incorrect syntax to wrong locations for modules etc. You need to have a read through dev.metasploit.com/redmine/projects/framework/repository documentation and have a look at other examples.
    – Rory Alsop
    Apr 27, 2012 at 23:02

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .