XOR Encoder - Metasploit
This page contains detailed information about how to use the encoder/x64/xor metasploit module. For list of all metasploit modules, visit the Metasploit Module Library.
Module Overview
Name: XOR Encoder
Module: encoder/x64/xor
Source code: modules/encoders/x64/xor.rb
Disclosure date: -
Last modification time: 2017-07-24 06:26:21 +0000
Supported architecture(s): x64
Supported platform(s): All
Target service / protocol: -
Target network port(s): -
List of CVEs: -
An x64 XOR encoder. Uses an 8 byte key and takes advantage of x64 relative addressing.
Module Ranking and Traits
Module Ranking:
- normal: The exploit is otherwise reliable, but depends on a specific version and can't (or doesn't) reliably autodetect. More information about ranking can be found here.
Basic Usage
msf > use encoder/x64/xor
msf encoder(xor) > show targets
... a list of targets ...
msf encoder(xor) > set TARGET target-id
msf encoder(xor) > show options
... show and set options ...
msf encoder(xor) > exploit
Go back to menu.
Msfconsole Usage
Here is how the encoder/x64/xor module looks in the msfconsole:
msf6 > use encoder/x64/xor
msf6 encoder(x64/xor) > show info
Name: XOR Encoder
Module: encoder/x64/xor
Platform: All
Arch: x64
Rank: Normal
Provided by:
sf <[email protected]>
Description:
An x64 XOR encoder. Uses an 8 byte key and takes advantage of x64
relative addressing.
Module Options
This is a complete list of options available in the encoder/x64/xor module:
msf6 encoder(x64/xor) > show options
Module options (encoder/x64/xor):
Name Current Setting Required Description
---- --------------- -------- -----------
Advanced Options
Here is a complete list of advanced options supported by the encoder/x64/xor module:
msf6 encoder(x64/xor) > show advanced
Module advanced options (encoder/x64/xor):
Name Current Setting Required Description
---- --------------- -------- -----------
VERBOSE false no Enable detailed status messages
WORKSPACE no Specify the workspace for this module
Go back to menu.
Related Pull Requests
- #8716 Merged Pull Request: Print_Status -> Print_Good (And OCD bits 'n bobs)
- #8338 Merged Pull Request: Fix msf/core and self.class msftidy warnings
- #7507 Merged Pull Request: Refactor arch/platform, refactor TLV XOR, add UUID to each packet, fix payload uuid/arch/platform tracking, and update everything to match
- #7253 Merged Pull Request: Attempts to address issue #6963 x64/xor encoder not working
- #6655 Merged Pull Request: use MetasploitModule as a class name
- #6648 Merged Pull Request: Change metasploit class names
- #2525 Merged Pull Request: Change module boilerplate
- #1241 Merged Pull Request: Removed all $Id$ and $Revision$ occurences
Go back to menu.
See Also
Check also the following modules related to this module:
- encoder/x64/xor_context
- encoder/x64/xor_dynamic
- encoder/x64/zutto_dekiru
- encoder/mipsbe/byte_xori
- encoder/mipsbe/longxor
- encoder/mipsle/byte_xori
- encoder/mipsle/longxor
- encoder/ppc/longxor
- encoder/ppc/longxor_tag
- encoder/sparc/longxor_tag
- encoder/x86/bloxor
- encoder/x86/call4_dword_xor
- encoder/x86/xor_dynamic
Authors
- sf
Version
This page has been produced using Metasploit Framework version 6.1.24-dev. For more modules, visit the Metasploit Module Library.
Go back to menu.