GPEN · Question #386
Which Metasploitvncinject stager will allow VNC communications from the attacker to a listening port of the attacker's choosing on the victim machine?
The correct answer is B. Vncinject/reverse.tcp. In Metasploit, the vncinject/reverse_tcp stager causes the victim to initiate an outbound TCP connection back to an attacker-controlled listener, injecting VNC traffic over that reverse channel.
Question
Which Metasploitvncinject stager will allow VNC communications from the attacker to a listening port of the attacker's choosing on the victim machine?
Options
- AVncinject/find.lag
- BVncinject/reverse.tcp
- CVncinject/reverse-http
- DVncinject /bind.tcp
How the community answered
(42 responses)- A5% (2)
- B79% (33)
- C2% (1)
- D14% (6)
Why each option
In Metasploit, the vncinject/reverse_tcp stager causes the victim to initiate an outbound TCP connection back to an attacker-controlled listener, injecting VNC traffic over that reverse channel.
vncinject/find_tag (listed here as find.lag) is not a standard payload transport stager; it does not establish a reverse VNC communication channel.
The reverse_tcp stager directs the compromised system to connect outbound to the attacker's LHOST and LPORT, effectively letting the attacker choose the listening port on their own machine. VNC session traffic is then tunneled through this reverse TCP connection, bypassing inbound firewall rules on the victim.
reverse_http tunnels the payload over HTTP rather than a raw TCP socket, which is a distinct transport mechanism not described in the question.
bind_tcp opens a listening port on the victim and waits for the attacker to connect inbound, which is the opposite direction of a reverse stager.
Concept tested: Metasploit vncinject reverse_tcp stager connection direction
Source: https://www.offensive-security.com/metasploit-unleashed/meterpreter-basics/
Topics
Community Discussion
No community discussion yet for this question.