Alpha2 Alphanumeric Unicode Mixedcase Encoder - Metasploit


This page contains detailed information about how to use the encoder/x86/unicode_mixed metasploit module. For list of all metasploit modules, visit the Metasploit Module Library.

Table Of Contents
hide

Module Overview

Name: Alpha2 Alphanumeric Unicode Mixedcase Encoder
Module: encoder/x86/unicode_mixed
Source code: modules/encoders/x86/unicode_mixed.rb
Disclosure date: -
Last modification time: 2020-05-02 21:51:05 +0000
Supported architecture(s): x86
Supported platform(s): All
Target service / protocol: -
Target network port(s): -
List of CVEs: -

Encodes payload as unicode-safe mixedcase text. This encoder uses SkyLined's Alpha2 encoding suite.

Module Ranking and Traits

Module Ranking:

  • manual: The exploit is unstable or difficult to exploit and is basically a DoS. This ranking is also used when the module has no use unless specifically configured by the user (e.g.: exploit/windows/smb/psexec). More information about ranking can be found here.

Basic Usage

msf > use encoder/x86/unicode_mixed
msf encoder(unicode_mixed) > show targets
    ... a list of targets ...
msf encoder(unicode_mixed) > set TARGET target-id
msf encoder(unicode_mixed) > show options
    ... show and set options ...
msf encoder(unicode_mixed) > exploit

Go back to menu.

Msfconsole Usage

Here is how the encoder/x86/unicode_mixed module looks in the msfconsole:

msf6 > use encoder/x86/unicode_mixed

msf6 encoder(x86/unicode_mixed) > show info

       Name: Alpha2 Alphanumeric Unicode Mixedcase Encoder
     Module: encoder/x86/unicode_mixed
   Platform: All
       Arch: x86
       Rank: Manual

Provided by:
  pusscat <[email protected]>
  skylined <[email protected]>

Description:
  Encodes payload as unicode-safe mixedcase text. This encoder uses 
  SkyLined's Alpha2 encoding suite.

Module Options

This is a complete list of options available in the encoder/x86/unicode_mixed module:

msf6 encoder(x86/unicode_mixed) > show options

Module options (encoder/x86/unicode_mixed):

   Name            Current Setting  Required  Description
   ----            ---------------  --------  -----------
   AllowWin32SEH   false            yes       Use SEH to determine the address of the stub (Windows only)
   BufferOffset    0                no        The offset to the buffer from the start of the register
   BufferRegister  ECX              yes       The register that points to the encoded payload

Advanced Options

Here is a complete list of advanced options supported by the encoder/x86/unicode_mixed module:

msf6 encoder(x86/unicode_mixed) > show advanced

Module advanced options (encoder/x86/unicode_mixed):

   Name       Current Setting  Required  Description
   ----       ---------------  --------  -----------
   VERBOSE    false            no        Enable detailed status messages
   WORKSPACE                   no        Specify the workspace for this module

Go back to menu.

Error Messages

This module may fail with the following error messages:

Error Messages

Check for the possible causes from the code snippets below found in the module source code. This can often times help in identifying the root cause of the problem.

Need BufferRegister

Here is a relevant code snippet related to the "Need BufferRegister" error message:

36:	  #
37:	  def decoder_stub(_state)
38:	    reg = datastore['BufferRegister']
39:	    offset = datastore['BufferOffset'].to_i || 0
40:	    if !reg
41:	      raise EncodingError, 'Need BufferRegister'
42:	    end
43:	
44:	    Rex::Encoder::Alpha2::UnicodeMixed.gen_decoder(reg, offset)
45:	  end
46:

Go back to menu.

Go back to menu.

See Also

Check also the following modules related to this module:

Authors

  • pusscat
  • skylined

Version

This page has been produced using Metasploit Framework version 6.1.24-dev. For more modules, visit the Metasploit Module Library.

Go back to menu.