Book Image

Penetration Testing with the Bash shell

By : Keith Harald Esrick Makan
Book Image

Penetration Testing with the Bash shell

By: Keith Harald Esrick Makan

Overview of this book

Table of Contents (13 chapters)

Preparing payloads with Metasploit


During penetration tests, you may often need to demonstrate that you have unbridled control of a host, or you may need to actually interact with them using some form of remotely—either from the local network or the wider Internet—accessible command-line interface. If you find yourself in a situation that allows you to execute the arbitrary code on a host, and you'd like to control it remotely, one of the most common ways to take advantage of the situation is to upload a shell that allows you to remotely interact with the command shell or prompt. Metasploit has a tool dedicated to catering to these situations called msfpayload.

The Metasploit payload generator (msfpayload) allows you to generate an executable package that connects back to the Meterpreter instance that runs in your Metasploit session.

Tip

About Meterpreter

Metasploit's Meterpreter is an interface to a payload that allows its users to dynamically inject instructions into a host compromised with...