The msfvenom utility
Earlier, the Metasploit Framework offered two different utilities, namely, ;msfpayload
and msfencode.
The msfpayload
was used to generate a payload in a specified format and the msfencode
was used to encode and obfuscate the payload using various algorithms. However, the newer and the latest version of the Metasploit Framework has combined both of these utilities into a single utility called msfvenom
.
The msfvenom
utility can generate a payload as well as encode the same in a single command. We shall see a few commands next:
Note
The msfvenom
is a separate utility and doesn't require msfconsole
to be running at same time.
List payloads: The
msfvenom
utility supports all standard Metasploit payloads. We can list all the available payloads using themsfvenom --list payloads
command as shown in the following screenshot:
List encoders: As we have discussed earlier, the
msfvenom
is a single utility, which can generate as well as encode the payload. It supports all standard Metasploit...