Example 5-17. Payloads compatible with the distcc exploit
msf exploit
(
unix/misc/distcc_exec
)
> show payloads
Compatible
Payloads
===================
Disclosure
Name Date Rank Description
---- ---------- ---- -----------
cmd/unix/bind_perl
normal Unix Command Shell,
Bind TCP
(
via Perl
)
cmd/unix/bind_perl_ipv6 normal Unix Command Shell,
Bind TCP
(
via perl
)
IPv6
cmd/unix/bind_ruby normal Unix Command Shell,
Bind TCP
(
via Ruby
)
cmd/unix/bind_ruby_ipv6 normal Unix Command Shell,
Bind TCP
(
via Ruby
)
IPv6
cmd/unix/generic
normal Unix Command, Generic
Command Execution
cmd/unix/reverse normal Unix Command Shell,
Double
Reverse TCP
(
telnet
)
cmd/unix/reverse_bash normal Unix Command Shell,
Reverse TCP
(
/dev/tcp
)
cmd/unix/reverse_bash_telnet_ssl normal Unix Command Shell,
Reverse
TCP SSL
(
telnet
)
cmd/unix/reverse_openssl normal Unix Command Shell,
Double
Reverse TCP SSL
(
openssl
)
cmd/unix/reverse_perl normal Unix Command Shell,
Reverse TCP
(
via Perl
)
cmd/unix/reverse_perl_ssl normal Unix Command Shell,
Reverse TCP SSL
(
via perl
)
cmd/unix/reverse_ruby normal Unix Command Shell,
Reverse TCP
(
via Ruby
)
cmd/unix/reverse_ruby_ssl normal Unix Command Shell,
Reverse TCP SSL
(
via Ruby
)
cmd/unix/reverse_ssl_double_telnet normal Unix Command Shell,
Double Reverse TCP SSL
(
telnet
)
Not all exploits will present a command shell. Some will provide an operating sys‐
tem–agnostic interface that is provided by Metasploit called
Meterpreter
. Meterpreter
doesn’t provide access to all
of the shell commands directly, but there are a lot of
advantages to using Meterpreter, in part because it provides access to post-
exploitation modules.
Additionally, features of Meterpreter will give you access to
other features, like getting screen captures of desktops and using any web cam that is
installed on your target system.
