Metasploit Revealed: Secrets of the Expert Pentester

Understanding RailGun and its scripting

RailGun gives us immense power to perform tasks that Metasploit may not perform. We can raise exceptions to any DLL file from the breached system and create some more advanced post-exploitation mechanisms.

Now, let's see how we can call a function using basic API calls with RailGun and understand how it works:

client.railgun.DLLname.function(parameters) 

This is the basic structure of an API call in RailGun. The client.railgun keyword defines that we need the functionality of RailGun for the client. The DLLname keyword specifies the name of the DLL file for making a call. The function (parameters) keyword in the syntax specifies the actual API function that is to be provoked with required parameters ...