Chapter 5: ./ReverseShell

1. Yes, it is. Not understanding the tool can be much more problematic than learning to understand it. Also, you can think of unique solutions in a red-team engagement.
2. Yes, if you don't want the organization to detect your presence in the network.
3. You can either buy MSF Pro, which comes with the GUI web interface, where you can generate the payloads, or you can also use the venom tool (source: https://github.com/r00t-3xp10it/venom) for a partial GUI in Metasploit payload generation.
4. You can download the Cryptcat source code for Windows and compile it using Visual Studio 2005.
5. Yes, you can. But make sure the encoder you will be using is supported for this operation.
6. It's recommended that you do because it will get much harder for the organization's defenders to detect you in this way.
7. Yes, it is. However, it also has a premium access that...