Feature/add aarch64 rex powershell - #21854
Open
bwatters-r7 wants to merge 2 commits into
Open
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
Update rex-powershell version and the psexec module to support Windows AARCH64 payloads using MSIL, old, reflection, and net powershell loaders.
Breaking Changes
None
Verification Steps
Test Results
=== MATRIX CASE method=msil form=staged payload=windows/shell/reverse_tcp ===
=== MATRIX CASE method=msil form=stageless
=== MATRIX CASE method=old form=staged payload=windows/shell/reverse_tcp ===
=== MATRIX CASE method=old form=stageless
=== MATRIX CASE method=reflection form=staged
=== MATRIX CASE method=reflection form=stageless
=== MATRIX CASE method=net form=staged payload=windows/shell/reverse_tcp ===
=== MATRIX CASE method=net form=stageless
Test Evidence
rex-powershell 0.1.105 Test Matrix
Module:
exploit/windows/smb/psexecTarget:
PowerShell(TARGET 1)Identity expected:
nt authority\systemwhoami10.5.132.147nt authority\system10.5.132.147nt authority\system10.5.132.147nt authority\system10.5.132.147nt authority\system10.5.132.102nt authority\system10.5.132.102nt authority\system10.5.132.102nt authority\system10.5.132.102nt authority\system10.5.132.154nt authority\system10.5.132.154nt authority\system10.5.132.154nt authority\system10.5.132.154nt authority\system10.5.132.154nt authority\system10.5.132.154nt authority\system10.5.132.154nt authority\system10.5.132.154nt authority\systemEnvironment
AI Usage Disclosure
Pre-Submission Checklist
documentation/modules(new modules only)lib/changes)Hardware and Complex Software Module Guidance
If your module targets specialized hardware (routers, IoT, PLCs, etc.) or complex software (licensed, multi-service, or multi-version), provide a pcap, screen recording, or video showing successful execution.
Email sanitized pcaps/recordings to msfdev@metasploit.com — remove real IPs, credentials, and hostnames before sending. If hardware/software is unavailable, explain in the PR description.
Responsiveness and PR Takeover Policy
We want every contribution to make it into the project. If approximately 2 weeks pass after a review request without a comment or code update from you, the team may take over the PR and complete the work on your behalf.
If this happens, you will remain credited as a co-author on the final commit — your contribution is always recognized.
This policy exists to keep the project moving forward. It is not a reflection on the quality of your work or your involvement. Life happens, and we would rather finish the work together than let a good contribution go stale.