BloXor - A Metamorphic Block Based XOR Encoder - Metasploit

This page contains detailed information about how to use the encoder/x86/bloxor metasploit module. For list of all metasploit modules, visit the Metasploit Module Library.

Module Overview

---

Name: BloXor - A Metamorphic Block Based XOR Encoder
Module: encoder/x86/bloxor
Source code: modules/encoders/x86/bloxor.rb
Disclosure date: -
Last modification time: 2017-07-24 06:26:21 +0000
Supported architecture(s): x86
Supported platform(s): All
Target service / protocol: -
Target network port(s): -
List of CVEs: -

A Metamorphic Block Based XOR Encoder.

Module Ranking and Traits

---

Module Ranking:

• manual: The exploit is unstable or difficult to exploit and is basically a DoS. This ranking is also used when the module has no use unless specifically configured by the user (e.g.: exploit/windows/smb/psexec). More information about ranking can be found here.

Basic Usage

---

msf > use encoder/x86/bloxor
msf encoder(bloxor) > show targets
    ... a list of targets ...
msf encoder(bloxor) > set TARGET target-id
msf encoder(bloxor) > show options
    ... show and set options ...
msf encoder(bloxor) > exploit

Go back to menu.

Msfconsole Usage

---

Here is how the encoder/x86/bloxor module looks in the msfconsole:

msf6 > use encoder/x86/bloxor

msf6 encoder(x86/bloxor) > show info

       Name: BloXor - A Metamorphic Block Based XOR Encoder
     Module: encoder/x86/bloxor
   Platform: All
       Arch: x86
       Rank: Manual

Provided by:
  sf <[email protected]>

Description:
  A Metamorphic Block Based XOR Encoder.

Module Options

---

This is a complete list of options available in the encoder/x86/bloxor module:

msf6 encoder(x86/bloxor) > show options

Module options (encoder/x86/bloxor):

   Name  Current Setting  Required  Description
   ----  ---------------  --------  -----------

Advanced Options

---

Here is a complete list of advanced options supported by the encoder/x86/bloxor module:

msf6 encoder(x86/bloxor) > show advanced

Module advanced options (encoder/x86/bloxor):

   Name       Current Setting  Required  Description
   ----       ---------------  --------  -----------
   VERBOSE    false            no        Enable detailed status messages
   WORKSPACE                   no        Specify the workspace for this module

Go back to menu.

Related Pull Requests

---

• #8716 Merged Pull Request: Print_Status -> Print_Good (And OCD bits 'n bobs)
• #8338 Merged Pull Request: Fix msf/core and self.class msftidy warnings
• #6655 Merged Pull Request: use MetasploitModule as a class name
• #6648 Merged Pull Request: Change metasploit class names
• #2525 Merged Pull Request: Change module boilerplate
• #1285 Merged Pull Request: BloXor Encoder

Go back to menu.

See Also

---

Check also the following modules related to this module:

• encoder/x86/add_sub
• encoder/x86/alpha_mixed
• encoder/x86/alpha_upper
• encoder/x86/avoid_underscore_tolower
• encoder/x86/avoid_utf8_tolower
• encoder/x86/bmp_polyglot
• encoder/x86/call4_dword_xor
• encoder/x86/context_cpuid
• encoder/x86/context_stat
• encoder/x86/context_time
• encoder/x86/countdown
• encoder/x86/fnstenv_mov
• encoder/x86/jmp_call_additive
• encoder/x86/nonalpha
• encoder/x86/nonupper
• encoder/x86/opt_sub
• encoder/x86/service
• encoder/x86/shikata_ga_nai
• encoder/x86/single_static_bit
• encoder/x86/unicode_mixed
• encoder/x86/unicode_upper
• encoder/x86/xor_dynamic

Authors

---

• sf

Version

---

This page has been produced using Metasploit Framework version 6.1.24-dev. For more modules, visit the Metasploit Module Library.

Go back to menu.