So prior to MSF venom, there were MSF payload and MSF and Khoder that would help us to compose more
stealthy payload.
Now, I want to start it like a like a fairy tale or a story, but it wasn't really that far back.
The way I remember it, it was 2015 when MSF venom replaced both MSF payload and MSF uncowed.
Now, I really like this tool.
As it's defined in its description.
A Metis boy standalone payload generator, so I think the guys from the Metters Floyd team deserve applause
for this brilliant tool.
At first glance, you might think it's a simple tool.
What can I do?
And yes, the power is derived from its simplicity and ease of use.
However, it is very comprehensive when you examine its payloads and coders and other capabilities.
So let's have a look at how to use this tool.
Open up a terminal tab.
And simply type MSF venom help to discover the two.
The help screen is pretty well defined and the parameters are well explained.
So make sure that you become well acquainted with it.
Now, you can define many properties for your payloads.
You can add novelette, avoid bad charge, even add custom codes to your payloads.
Also, MSF venom allows you to encode the payload and even lets you use an executable template to be
stealthier, MSF Venom supports all medicine Boit payload.
So to list the available payloads type MSRA venom, well, payload.
The list encoders just type in MSM Venom El Encoders.
And you can do this for any of the architecture supported.
For platforms.
And for format's.
With MSRA venom, you have many ways to create a payload file.
See Python aspects and many other times.
So you can use any payload with almost all options inside MSF venom.
So type MSF venom P in the payload daim.
And to list the options for a payload and list options.
And here we have the description of interpretor reverse TCP payload.
So while creating a payload contained file, you can use all these options to build a more specific
file.
So now let's create a file from the very beginning.
MSF Venom P, then the payload windows execs for Interpretor Reverse TCP.
And payload options almost equals 10, 10 to 11 outpoured equals four four four one.
Platform Windows for Windows Systems.
A 64 for 64 bit architecture's.
F FXE for Windows Executables and finally, O.
For the output file there.
Normal dot exi.
OK, so my executable is now saved in the malware directory and I'll change the directory to desktop
malware.
Well, that's normal, not file resides here.
So file normal Dixy.
And see, there, you can tell that the file is a Windows executable.
So now.
Go to Métis Point and start O'Hanlan.
Use exploit multi handler.
Set payload to.
Windows execs for better reverse DCP.
Said he'll host.
To tend tend to doubt one one said outport two four four four one and show the options again just to
double check.
Right, so everything looks good.
Exploit Jay.
And OK, so the handler started.
So now I'm going to open up a new tab.
And start a Python server from the malware directory.
Python m simple h TTP server on PT. eight thousand.
Then I'm going to open Métis, voidable three.
Start Internet Explorer and go to.
HTP Collins, last large tender tender to the one one call an eight thousand.
So this address will show the files in the malware directory on COLLY.
Now.
Click the normal daddy Yankee to download.
And save it to the desktop.
OK, so let me just open MSF console.
For Métis, portable three run normal daily by double clicking on.
On the left, Bain, you can see the session open.
So type sessions.
And this is it on court for four, for one.
So interact with session one, get UID.
For.
And there you have it, the basic usage of MSRA venom, so you use a payload to generate a vulnerable
file, then you deliver this file to the target.
And then make the target, run this file to connect back to the handler running on our colleague.
So what I'll do is apply this logic in the next few videos as well, so strap on your seatbelt.
We're going to go for a ride.