Non-Upper Encoder - Metasploit

This page contains detailed information about how to use the encoder/x86/nonupper metasploit module. For list of all metasploit modules, visit the Metasploit Module Library.

Module Overview

---

Name: Non-Upper Encoder
Module: encoder/x86/nonupper
Source code: modules/encoders/x86/nonupper.rb
Disclosure date: -
Last modification time: 2017-07-24 06:26:21 +0000
Supported architecture(s): x86
Supported platform(s): All
Target service / protocol: -
Target network port(s): -
List of CVEs: -

Encodes payloads as non-alpha based bytes. This allows payloads to bypass tolower() calls, but will fail isalpha(). Table based design from Russel Sanford.

Module Ranking and Traits

---

Module Ranking:

• low: The exploit is nearly impossible to exploit (or under 50% success rate) for common platforms. More information about ranking can be found here.

Basic Usage

---

msf > use encoder/x86/nonupper
msf encoder(nonupper) > show targets
    ... a list of targets ...
msf encoder(nonupper) > set TARGET target-id
msf encoder(nonupper) > show options
    ... show and set options ...
msf encoder(nonupper) > exploit

Go back to menu.

Msfconsole Usage

---

Here is how the encoder/x86/nonupper module looks in the msfconsole:

msf6 > use encoder/x86/nonupper

msf6 encoder(x86/nonupper) > show info

       Name: Non-Upper Encoder
     Module: encoder/x86/nonupper
   Platform: All
       Arch: x86
       Rank: Low

Provided by:
  pusscat <[email protected]>

Description:
  Encodes payloads as non-alpha based bytes. This allows payloads to 
  bypass tolower() calls, but will fail isalpha(). Table based design 
  from Russel Sanford.

Module Options

---

This is a complete list of options available in the encoder/x86/nonupper module:

msf6 encoder(x86/nonupper) > show options

Module options (encoder/x86/nonupper):

   Name  Current Setting  Required  Description
   ----  ---------------  --------  -----------

Advanced Options

---

Here is a complete list of advanced options supported by the encoder/x86/nonupper module:

msf6 encoder(x86/nonupper) > show advanced

Module advanced options (encoder/x86/nonupper):

   Name       Current Setting  Required  Description
   ----       ---------------  --------  -----------
   VERBOSE    false            no        Enable detailed status messages
   WORKSPACE                   no        Specify the workspace for this module

Go back to menu.

Error Messages

---

This module may fail with the following error messages:

Check for the possible causes from the code snippets below found in the module source code. This can often times help in identifying the root cause of the problem.

BadChar

---

Here is a relevant code snippet related to the "BadChar" error message:

48:	      # This is a bandaid to deal with the fact that, since it's in
49:	      # the Rex namespace, the encoder itself doesn't have access to the
50:	      # Msf exception classes.  Turn it into an actual EncodingError
51:	      # exception so the encoder doesn't look broken when it just fails
52:	      # to encode.
53:	      raise BadcharError if e.message == "BadChar"
54:	    end
55:	    return newchar
56:	  end
57:	
58:	  #

Go back to menu.

Related Pull Requests

---

• #8716 Merged Pull Request: Print_Status -> Print_Good (And OCD bits 'n bobs)
• #8338 Merged Pull Request: Fix msf/core and self.class msftidy warnings
• #6655 Merged Pull Request: use MetasploitModule as a class name
• #6648 Merged Pull Request: Change metasploit class names
• #2525 Merged Pull Request: Change module boilerplate
• #1241 Merged Pull Request: Removed all $Id$ and $Revision$ occurences
• #1110 Merged Pull Request: Fix instances of invalid lower-case datastore use

Go back to menu.

See Also

---

Check also the following modules related to this module:

• encoder/x86/add_sub
• encoder/x86/alpha_mixed
• encoder/x86/alpha_upper
• encoder/x86/avoid_underscore_tolower
• encoder/x86/avoid_utf8_tolower
• encoder/x86/bloxor
• encoder/x86/bmp_polyglot
• encoder/x86/call4_dword_xor
• encoder/x86/context_cpuid
• encoder/x86/context_stat
• encoder/x86/context_time
• encoder/x86/countdown
• encoder/x86/fnstenv_mov
• encoder/x86/jmp_call_additive
• encoder/x86/nonalpha
• encoder/x86/opt_sub
• encoder/x86/service
• encoder/x86/shikata_ga_nai
• encoder/x86/single_static_bit
• encoder/x86/unicode_mixed
• encoder/x86/unicode_upper
• encoder/x86/xor_dynamic

Authors

---

• pusscat

Version

---

This page has been produced using Metasploit Framework version 6.1.24-dev. For more modules, visit the Metasploit Module Library.

Go back to menu.