Bourne ${IFS} Substitution Command Encoder - Metasploit

This page contains detailed information about how to use the encoder/cmd/ifs metasploit module. For list of all metasploit modules, visit the Metasploit Module Library.

Module Overview

---

Name: Bourne ${IFS} Substitution Command Encoder
Module: encoder/cmd/ifs
Source code: modules/encoders/cmd/ifs.rb
Disclosure date: -
Last modification time: 2018-08-23 15:20:38 +0000
Supported architecture(s): cmd
Supported platform(s): Unix
Target service / protocol: -
Target network port(s): -
List of CVEs: -

This encoder uses Bourne ${IFS} substitution to avoid whitespace without being overly fancy.

Module Ranking and Traits

---

Module Ranking:

• low: The exploit is nearly impossible to exploit (or under 50% success rate) for common platforms. More information about ranking can be found here.

Basic Usage

---

msf > use encoder/cmd/ifs
msf encoder(ifs) > show targets
    ... a list of targets ...
msf encoder(ifs) > set TARGET target-id
msf encoder(ifs) > show options
    ... show and set options ...
msf encoder(ifs) > exploit

Go back to menu.

Msfconsole Usage

---

Here is how the encoder/cmd/ifs module looks in the msfconsole:

msf6 > use encoder/cmd/ifs

msf6 encoder(cmd/ifs) > show info

       Name: Bourne ${IFS} Substitution Command Encoder
     Module: encoder/cmd/ifs
   Platform: Unix
       Arch: cmd
       Rank: Low

Provided by:
  egypt <[email protected]>
  wvu <[email protected]>

Description:
  This encoder uses Bourne ${IFS} substitution to avoid whitespace 
  without being overly fancy.

Module Options

---

This is a complete list of options available in the encoder/cmd/ifs module:

msf6 encoder(cmd/ifs) > show options

Module options (encoder/cmd/ifs):

   Name  Current Setting  Required  Description
   ----  ---------------  --------  -----------

Advanced Options

---

Here is a complete list of advanced options supported by the encoder/cmd/ifs module:

msf6 encoder(cmd/ifs) > show advanced

Module advanced options (encoder/cmd/ifs):

   Name       Current Setting  Required  Description
   ----       ---------------  --------  -----------
   VERBOSE    false            no        Enable detailed status messages
   WORKSPACE                   no        Specify the workspace for this module

Go back to menu.

Related Pull Requests

---

• #10516 Merged Pull Request: Add brace expansion encoder and update ${IFS} encoder
• #8716 Merged Pull Request: Print_Status -> Print_Good (And OCD bits 'n bobs)
• #8338 Merged Pull Request: Fix msf/core and self.class msftidy warnings
• #6655 Merged Pull Request: use MetasploitModule as a class name
• #6648 Merged Pull Request: Change metasploit class names
• #2944 Merged Pull Request: Use the platform when encoding the payload
• #2525 Merged Pull Request: Change module boilerplate
• #1241 Merged Pull Request: Removed all $Id$ and $Revision$ occurences

Go back to menu.

See Also

---

Check also the following modules related to this module:

• encoder/cmd/brace
• encoder/cmd/echo
• encoder/cmd/generic_sh
• encoder/cmd/perl
• encoder/cmd/powershell_base64
• encoder/cmd/printf_php_mq

Authors

---

• egypt
• wvu

Version

---

This page has been produced using Metasploit Framework version 6.1.24-dev. For more modules, visit the Metasploit Module Library.

Go back to menu.