Name: Z/OS (MVS) Command Shell, Reverse TCP Module: payload/cmd/mainframe/reverse_shell_jcl Platform: Mainframe Arch: cmd Needs Admin: No Total size: 8993 Rank: Normal Provided by: Bigendian Smalls Basic options: Name Current Setting Required Description ---- --------------- -------- ----------- ACTNUM MSFUSER-ACCTING-INFO yes Accounting info for JCL JOB card JCLASS A yes Job Class for JCL JOB card LHOST 0.0.0.0 yes The listen address (an interface may be specified) LPORT 4444 yes The listen port MSGCLASS Z yes Message Class for JCL JOB card MSGLEVEL (0,0) yes Message Level for JCL JOB card NOTIFY no Notify User for JCL JOB card PGMNAME programmer name yes Programmer name for JCL JOB card Description: Provide JCL which creates a reverse shell This implementation does not include ebcdic character translation, so a client with translation capabilities is required. MSF handles this automatically. Name Current Setting Required Description ---- --------------- -------- ----------- AutoRunScript no A script to run automatically on session creation. AutoVerifySession true yes Automatically verify and drop invalid sessions CommandShellCleanupCommand no A command to run before the session is closed InitialAutoRunScript no An initial script to run on session creation (before AutoRunScript) JOBNAME DUMMY yes Job name for JCL JOB card NTFYUSR false yes Include NOTIFY Parm? ReverseAllowProxy false yes Allow reverse tcp even with Proxies specified. Connect back will NOT go through proxy but directly to LHOST ReverseListenerBindAddress no The specific IP address to bind to on the local system ReverseListenerBindPort no The port to bind to on the local system if different from LPORT ReverseListenerComm no The specific communication channel to use for this listener ReverseListenerThreaded false yes Handle every connection in a new thread (experimental) StagerRetryCount 10 no The number of times the stager should retry if the first connect fails StagerRetryWait 5 no Number of seconds to wait for the stager between reconnect attempts VERBOSE false no Enable detailed status messages WORKSPACE no Specify the workspace for this module