WEBVTT

00:00:05.010 --> 00:00:09.060
Welcome to Pluralsight and this red team tools course featuring msfvenom,

00:00:09.190 --> 00:00:11.780
the open‑source tool developed as part of the Metasploit

00:00:11.780 --> 00:00:13.840
Framework and maintained by Rapid7.

00:00:14.670 --> 00:00:16.830
Venom is a tool that penetration testers,

00:00:16.860 --> 00:00:17.880
ethical hackers,

00:00:17.940 --> 00:00:21.340
bug hunters, and security testers can use to generate shell

00:00:21.340 --> 00:00:23.770
code payloads for inclusion in their exploits.

00:00:24.290 --> 00:00:27.490
Venom generates a variety of payloads and even encrypts them to

00:00:27.490 --> 00:00:31.000
help you exploit vulnerable software and gain escalated access

00:00:31.030 --> 00:00:32.850
through a bind or a reverse shell.

00:00:33.540 --> 00:00:35.850
Msfvenom's name consists of two parts.

00:00:36.340 --> 00:00:40.260
The msf in the name stands for Metasploit Framework, and venom is the name

00:00:40.260 --> 00:00:44.650
used in place of the two tools that were combined to form it, msfpayload

00:00:44.970 --> 00:00:50.950
and msfencode. Come join me as we explore different uses for msfvenom and

00:00:50.950 --> 00:00:54.650
generate our own shell code payloads that we will use to gain access to

00:00:54.650 --> 00:00:55.760
some vulnerable hosts.