‫To compromise the victims systems.
‫We prepared some malicious software and forced the victim to run the malware into their systems so we
‫can open a backdoor or steal some data or gain a session, et cetera.
‫Before talking about the customer payload creation, we need to see a few terms to make the subject
‫clearer.
‫Most likely, you already know the terms we'll talk about in this slide, if so, just jump to the next
‫one.
‫Malware.
‫It's a short term of the term malicious software.
‫It's a kind of software that's used to compromise the computer systems.
‫It's an umbrella term used to refer to a variety of forms of hostile or intrusive software, including
‫computer viruses, worms, trojans, ransomware, spyware, adware, shareware and other malicious programs.
‫It can take the form of executable code, scripts, act of content and other software.
‫Payload inside malware is the portion of the malware which performs malicious action.
‫Metasploit Framework is one of the most known terms in the cybersecurity domain as the open source project
‫of the Metasploit Project Metasploit Framework as a tool for developing and executing exploit code against
‫the target machine.
‫Even though they're depreciated and removed from Metasploit Framework, I'd like to talk about MSFT
‫payload and MSFT encode first the depreciated because their abilities are collected into a single tool.
‫MSFT Venom To understand what MSF Venom does, it's better to talk about massive payload and MSF encode
‫first.
‫MSF payload was a command line tool that's used to generate an output, all the various types of shellcode
‫that are available in Metasploit using MMFs payload, you can create an executable file as well as creating
‫a payload to embed the file the parameters displayed in the slide.
‫Give us some more about what the MSV payload does.
‫Most of the time, one cannot simply use shellcode generated straight out of mischief payload.
‫It needs to be encoded to suit the target in order to function properly.
‫This can mean transforming your shellcode into pure alphanumeric, getting rid of bad characters or
‫encoding it for 64 bit target.
‫It can also be instructed to encode shellcode multiple times, output the shellcode in numerous formats,
‫see Perl, Ruby and one can even merge it to an existing executable file.
‫So most of the time this tool was used in conjunction with MSFT payload.
‫MSFT Venom is the Metasploit standalone payload generator.
‫It's the combination of MSF payload and MSF code putting both of these tools into a single framework
‫instance.
‫That means MSF Venom is a combination of payload generation and encoding.
‫You can do everything that you can do with MSF payload and MSF.
‫In code, you can generate a payload, encode the payload, avoid the bad characters, use a custom
‫template and more.