What is the difference between SRVHOST and LHOST in Metasploit. I am testing an exploit in my virtual lab of which I had to set both options. LHOST was an option for the payload selected, while SRVHOST was included among the options to be set for the exploit. I believe SRVHOST and LHOST should be the address of my computer. I then tried giving SRVHOST a wrong IP-address and LHOST the right IP address, and the connection back to my computer was successful; but if I gave LHOST a wrong IP-address and SRVHOST the right IP-address, the reverse connection failed.

Why then do I need the option SRVHOST since LHOST performs the same function in my payload? and Practically, how can SRVHOST be used?


SRVHOST is generally the option that you set when you are serving a exploit on a web server and LHOST is the option you would set if you were using a exploit that is not going to be served on a web server.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.