A payload is a piece of code that execute on a target system, and it helps us carry out some of the
operations, such as connect to the command line of the target after a successful exploitation.
To basically understand what a payload does, let's consider a real world example.
So I want to show you an example that I heard a before, which helps me understand it as well.
Payloads are kind of an explosive material that's in the head of a missile.
When the missile hits the target, the explosive material causes the damage desired by the owner.
Now the owner of the missile can change the explosive material as well as the payload.
So that's the way that the Métis Boite framework works with payloads.
It allows you to perform some operations on the target system.
For example, reverse shell is a payload that creates a connection from the target machine back to you
as a Windows command prompt, whereas a bind shell is a payload that binds a command prompt to a listening
port on the target machine, which you can then connect to.
This screenshot shows various categories of payload modules present in the media spotlight framework.
So I'm going to go to the Métis point to rectory to view payloads.
I'm using Glee to be clear.
And here under the payload folder.
You're going to see three different kinds of folders named singles stagers and stages.
These are the main payload types.
Singles are the payloads that consist of the exploit and requires shall code, which means they have
everything that is required to exploit the vulnerability on the target.
Naturally, the size of these payloads is pretty big.
That's it's not going to be good for if you want to be stealthy.
So, for example, this one Metro operator, reverse TCP.
And stagers, just so you know, sometimes size really matters.
OK, the stagers payload comes in handy in such a situation.
So they don't have the exploit code.
That means they're going to be smaller in size and it's going to be in many other tests.
Like this one binde TCP and reverse TCP.
And then finally stages after the stagers communicate with a target system, stages are then uploaded
to the target system to do the actual actions desired by the penetration tester or attacker.
And here you see the interpreter payload, which is the most used stages, payload.
And you'll use it in many exploits, but we're going to get to that in some of the later sections.
All right.
So that's enough theory, don't you think?
So open up your terminal again.
And just like before, you can use an auxiliary module, usage is the same.
Use and then the payload name.
Use payload windows, Metropia.
Binde Tsipi.
Now, let me tell you an important point here, binde TCP payloads make the attacking machine directly
connect to the target.
So when you show the options of this module.
There will be our host and airport variables.
Our host defines the address of the target machine.
On this case, it is the IP address of Matus voidable to.
And El Port is the port number on the attacking machine that the attacking machine will listen on.
And then on the other hand, there is reverse TCP connections, shall I show you both ways?
Use payload.
Windows met her.
Rivers E.S.P.
When you show the options, you will see the L host and import variables, so in this case, Al host
is the IP address of the COLLY that the target will connect back to.
And Al Port is the port number on the Calli that will listen for incoming connections from the target.
So I'm going to set our host as my IP address.
Let me check my address on a new tab.
Just want to be sure.
OK, tend tend to not one.
One is my IP.
And I'll set airport to four for four or five, then you can use run.
Or generate as a command to generate the shall code of this bailout.
So this is the payload, and by scrolling down, you can view just how long it is.
But see, now you can use it as an exploit code.
But you're not going to work that way in this cause I'll tell you why coming up.