Using MSF venom, you can create more complicated malware doing this, you may suppose it will not be
easy for the security systems to recognize the malware.
Look at the examples seen in the slide.
You can use DAGI parameter to encode the payload.
You can use MSF Venom Dash El Encoders to see the list of encoders with the dashi parameter.
You can encode the payload several times.
In this example it was 10 times.
Darshak is used to preserve the template behavior and inject the payload as a new thread.
If you use this option, the size of the output file becomes a bit bigger than the template file.
But do not forget that you are still using a standard Métis payload.
Let's take a closer look at the listener.
If you use a payload with a reverse connection, also known as a connect back, you, the attacker,
have set up a listener first on your box.
The victim or target machine acts as a client connecting to that listener.
And then finally, you receive the session.
Exploits multigrain handler module of Métis flight framework is used to collect and manage multiple
sessions from different platforms, you can see the detailed options of the handler using show advanced
command.
If you set exit on Zeshan False, the handler continues to listen when an active session is killed.
Set the same payload with the malware and set the option of the payload, if you run the handler using
the exploit dash J command, the handler runs in the background.
When a session is opened, a message appears.
Use session Dash L Command to list the active sessions.
To activate a session use session I command with the I.D. number of that session.
You can use background command to send the session background.
Use session Darshak with session ID to kill a session, if you use Dask uppercase K parameter, you
kill all captured sessions.