Hello everyone. Welcome back in this video. We're going to
be talking about encoding payloads with msf. Venom. Now
again, just to go over the importance of
encoding and we're we're doing it in coding. Essentially, helps us
bypass anti virus detection. Now,
encoding is usually not a
very reliable way of bypassing antiviruses
primarily because anti-viruses on
windows are going to be signature-based and most of
these signatures already have been captured. So it's going to depend
On the type of encoder that you use and the various encoding Frameworks
that you utilize. And then, of course, there's the obvious,
the obvious element of crypting. Now,
in this video. We're going to be focusing on the shikata-ga-nai and
Coda, which is one of the most one more.
One of the greatest encoders that you can find actually with. Msf. Venom
one of the best working encoders. And
of course, if we take a look at the cheat sheet that we had visited earlier,
you can see that we actually have the encoded meterpreter
Windows reverse.
I shall write of ear that utilizes, she got a gun. I over
this example, does not include things like bad characters, which
I'll explain in a few seconds now. Again,
generating it is extremely simple. We again,
it, you go about just specifying. Msf. Venom specified,
the payload and then, you can also specify the architecture
and typically, when generating an
encoded payload. It is recommended that you use a
64-bit payload instead of
32 bit. But again, 32-bit just works.
Fine as well. So again, you specify the
payload and then use the encoder option and specify s*** cardigan.
I and you specify the iterations or
the amount of times you want to encode. The payload, the
more, the better. So what we'll do is we'll go into our
terminal and if I list out msf Venom and I'll
just open up the help menu right over here and
I'll just try and reduce the font size so that I can display
things much clearer. I'm looking for
the encoder option, which is
right over here. So, the encoder option is used
is denoted by using the minus or hyphen e. And
then we're also going to be taking a look at the
bad characters, which we can use the default
ones by default of course, which are going to be x 0.
0xff and yeah, that's pretty
much it. So the first thing we want to do is let's try and list out
the various, the encoders that we have, right? So msf, Venom and
I can list out and coders right
and hit enter and that's going to take
A few seconds and then you can go through all the various encode is
that you have based on the use case scenario. And
of course they're going to be sorted out in terms of their success rate
and the their functionality. So
again, we'll just wait for this to load up and
then we can specify or use the shikata-ga-nai encoder.
So there we are list out all the various and code
is available. And the important thing you want to take a look at
is, of course the platform. So, this is CMD. You also have
x64
X x86 or 32 bit and
then of course, you have your rank which sought it all from low to
excellent. And of course, low means this is not a very
good encoder. Excellent means this is an excellent echoed encoder.
And in our case, we're looking for
shh cardigan. I all right. So she got agonize right over
here and she got agonize a polymorphic X or
additive feedback encoder and
do use it. We just need to copy the name right over here.
So I'm just going to do that right now and we can go about generating.
Single payload. So again, generating, it is very, very simple. And
oh, by the way, we can specify the payload architecture
beforehand. And again, if I say Ms of
Venom, I can say Ms of Venom and I can then specify the
architecture of its x86 against a x86 or
x64. So on and so forth. In my case. I'm just going to
leave it to 32 bit. So I'll specify the payload and
the payload is going to be windows.
It's going to be diversity. Be we're going to set to the L. Host will
say, l host is going to be equal to. I'll just
open up a terminal just to confirm that the options are
correct. And we'll say is 10.0.0.0
five. Right? So we say 10.0.0.0 5
and we say l Port is going to be
will also set this to 4444 just
to keep things standardized and then we need to specify our
encoder, right? But what we
In do before in this we can just specify our format which is
going to be X exe. And then our encoder will
specify by using the option and then I'm going to paste in
my encoder which is Shikata. Can I we then need to specify
the iteration so I can specify the durations by
using the - I option. And again, specify five
iterations and that represents the number of times the
payload is going to be encoded and then I
can specify the bad characters, right? So, I can specify Bad
characters here. So if I open up my terminal,
This am is a Venom. I miss a Venom and
I'll just use the default Bad characters that we
want to get rid from the encoded payload.
So right over here, we'll just copy these bad characters.
These are the default Bad characters and we'll
just paste this in here. And we can then
output this in to the into the the
file name that we want. So again, we're just going to say encoded
will say encoded dot exe. And
I'm going to hit enter and mind you.
This is an Coke and coding using msf Venom.
We also have a Frameworks like Veil evasion, which
are much more powerful. But in this case, let's just use
the default, ricotta Kenai, and
Koda with msf Venom. So we'll give that a few seconds
to generate the encoded payload. There
we are. And again, it's going to use the
default 32-bit architecture. It's going
to say found one compatible encoder attempting, to encode. The
payload with five iterations, and it gives us the
file.
Sighs. There we are. And if we list out the files that
we have, we know of the payload exe and the encoded value
right over here. So what I'm going to do is I'm
just going to create a directory and I'll just say Ms.
Have venom. Msfn. Mm. I
miss her Venom payloads.
And I'll just create that directory, and I'm going to move all exe
files. All the files that were generated to
msf. Venom payloads, that we are. And
when we now use other Frameworks will sort them out
that way, so that we of, we can avoid any potential
confusion. That being said, that's
going to be it for this video in the next video. We'll start testing out
the various payloads that we've generated and we'll take
a look at generating or encoding, the
payloads with Frameworks like valid.
Vision. So I'll be seeing you in the next video.