Would you like to learn how to use a tool that can generate shellcode for you?
Do you need a tool that can generate a variety of
different payloads to add to your exploits?
Well, if that's what you're looking for you came to the right place.
Hello,
I'm Matt Glass and in this course I will show you how to use
msfvenom to generate shellcode payloads for a few different
scenarios. We will see how venom can be used by hackers when
exploiting vulnerabilities to get a Command shell on a target
device and take control. In this course,
I will also show you how to use venom to generate your own payloads and use
the same methods to take control of a vulnerable target.
But before we get to how it's used let's take a
moment to understand what venom is.
Venom is a part of the Metasploit Framework.
In fact, that's actually what the MSF in the name stands for.
Metasploit was created by H.D Moore in 2003 and is now owned by Rapid7.
Venom is actually a combination of two other tools, msfpayload and
msfencode. As the names of the original tools suggest, these tools provided
a method of creating a payload and then encoding it.
These functions are now contained within one tool, venom.
If you're wondering how you get msfvenum,
well if you're running Kali Linux it's preinstalled
and no further action is required.
If you need to obtain it though you can get it by
downloading the Metasploit Framework from Rapid7.
The payload generation portion of the tool allows you to generate
shellcode that can perform a variety of functions on a target.
These include creating bind and reverse shells.
Venom allows you to generate shellcode to fit a variety of different
scenarios and then encode that payload to eliminate characters that
your target will not interpret correctly.
These functions are used in the exploitation and escalation phases of an attack.
Depending on the vulnerability you're exploiting,
these actions may occur simultaneously.