Ronan Kervella

Results 119 comments of Ronan Kervella

The `msf` and `msf-inject` commands are not supported for other target OS than Windows. We currently don't have a way to safely execute shellcodes and perform remote injection on other...

Actually reopening this one for long term support. The other thing about stageless metasploit payloads for Linux / MacOS: they're not shellcode but plain ELF/MachO binaries. The way the metasploit-framework...

I'm aware that there are ways to do injection on Linux, it's just so far we don't have a safe implementation ready. On Windows it's easy, you can create a...

Looks like a bug in the `syscalls.LogonUser` definition. I'll have a look.

I think initially I only looked up at how Cobalt Strike did it, [per this blog post](https://www.cobaltstrike.com/blog/windows-access-tokens-and-alternate-credentials/). Looking up on `LOGON_INTERACTIVE`, it looks like you need a [specific privilege](https://www.bitvise.com/wug-logontype) on...

Hm as an alternative, maybe we could let the user pass the `LogonType`, defaulting to either `LOGIN_INTERACTIVE` or `LOGON_NEW_CREDENTIALS`.

Well initially the idea was to kinda replicate the `make_token` feature of Cobalt Strike, which is strictly about network credentials. My solution to cover a broader scope for this command...

A workaround on Unix/Linux systems is to use `stty` in the opened shell to do that. At least that's how I've been doing it since the first version of Sliver.

I'm not quite sure I understand the issue. Can you provide more technical details? By just using a TCP forwarder (like `socat` for example) as your front you should be...