DEPENDENCIES

The tool depends on Metasploit and python-ipcalc (already in Kali's repository).

MAIN FEATURES

• On the fly shellcode generation - per request mode.
  This will generate fresh shellcode for each request sent by the clients.
  Server responses will probably take a few seconds in this mode.

• On the fly shellcode generation - per session mode.
  This mode will generate shellcode for the first request, and it will cache it
  for later use.

  Maligno will serve the cached shellcode to all clients that request it.

  Maligno will maintain a cache for each configured Metasploit payload.
  The cache is removed when Maligno is shut down.

• Multi-payload support
  You may configure Maligno with several Metasploit payloads.
  Clients can request different payloads to the server. Payloads are referred by
  an index, which is passed as a GET parameter. Such parameter can be also configured.

• Multi-server support.
  Maligno can run on a single server with Metasploit, or in separate machines.

  Clients will connect to Maligno, and Maligno will generate shellcode
  that points to a pre-configured Metasploit multi handler.

• Encrypted communications
  Maligno is a web server which communicates via HTTP or HTTPS with the clients.
  Communications are encrypted with AES and encoded with Base64 both for HTTP and HTTPS.

  Encryption and encoding parameters can be configured.
  Clients do not validate the server certificate by default.

• Scope definition.
  Maligno allows you to define single IP addresses or ranges. This will ensure that
  your shellcode is served only to machines involved in your pentest.

  You may also use a wildcard in order to accept any address.

LICENSE

Maligno is licensed under the FreeBSD license.
Read http://www.encripto.no/tools/license.php for more details.