Hi,

Can someone tell me what is the difference between these two Metasploit payloads:

1) windows/shell/bind_tcp
Listen for a connection, Spawn a piped command shell (staged)

2) windows/shell_bind_tcp
Listen for a connection and spawn a command shell

They both have the same basic options:

Name      Current Setting  Required  Description
----      ---------------  --------  -----------
EXITFUNC  process          yes         Exit technique: seh, thread, process, none
LPORT       4444              yes         The listen port
RHOST                           no          The target address


Basically, what does "spawn a piped shell (staged)" means compared to "spawn a command shell"?

Thanks in advance

Great article, thanks!

I already knew about staged, stagers and singles, but I didn't know about the / and the _. I also figured what "piped" meant.

Thanks again ziggy_567