From 2a8c0f65e5d163a9cd6c904e0beaadf3553c92b8 Mon Sep 17 00:00:00 2001 From: Spencer McIntyre Date: Wed, 28 Feb 2024 14:56:14 -0500 Subject: [PATCH] Update the help output in the docs page too --- .../Dot-Net-Deserialization.md | 49 +++++++++++++------ 1 file changed, 33 insertions(+), 16 deletions(-) diff --git a/docs/metasploit-framework.wiki/Dot-Net-Deserialization.md b/docs/metasploit-framework.wiki/Dot-Net-Deserialization.md index 310103a35627a..1cccf2baaca1b 100644 --- a/docs/metasploit-framework.wiki/Dot-Net-Deserialization.md +++ b/docs/metasploit-framework.wiki/Dot-Net-Deserialization.md @@ -82,24 +82,41 @@ Generate a .NET deserialization payload that will execute an operating system command using the specified gadget chain and formatter. Available formatters: - * BinaryFormatter - * LosFormatter - * SoapFormatter + * BinaryFormatter + * LosFormatter + * SoapFormatter Available gadget chains: - * TextFormattingRunProperties - * TypeConfuseDelegate - * WindowsIdentity - -Example: ./dot_net.rb -c "net user msf msf /ADD" -f BinaryFormatter -g TextFormattingRunProperties - -Specific options: - -c, --command The command to run - -f, --formatter The formatter to use (default: BinaryFormatter) - -g, --gadget The gadget chain to use (default: TextFormattingRunProperties) - -o, --output The output format to use (default: raw, see: --list-output-formats) - --list-output-formats List available output formats, for use with --output - -h, --help Show this message + * ClaimsPrincipal + * DataSet + * DataSetTypeSpoof + * ObjectDataProvider + * TextFormattingRunProperties + * TypeConfuseDelegate + * WindowsIdentity + +Available HMAC algorithms: SHA1, HMACSHA256, HMACSHA384, HMACSHA512, MD5 + +Examples: + ./dot_net.rb -c "net user msf msf /ADD" -f BinaryFormatter -g TypeConfuseDelegate -o base64 + ./dot_net.rb -c "calc.exe" -f LosFormatter -g TextFormattingRunProperties \ + --viewstate-validation-key deadbeef --viewstate-validation-algorithm SHA1 + +General options: + -h, --help Show this message + -c, --command The command to run + -f, --formatter The formatter to use (default: BinaryFormatter) + -g, --gadget The gadget chain to use (default: TextFormattingRunProperties) + -o, --output The output format to use (default: raw, see: --list-output-formats) + --list-output-formats List available output formats, for use with --output + +ViewState related options: + --viewstate-generator + The ViewState generator string to use + --viewstate-validation-algorithm + The validation algorithm (default: SHA1, see: Available HMAC algorithms) + --viewstate-validation-key + The validationKey from the web.config file ``` The `-g` / `--gadget` option maps to the *gadget_chain* argument for the