Now MSF Venom is used to create malicious files, not necessarily for us to be
able to reach back
to things like MSF console, but they can go out on their own and cause all
sorts of different kinds
of things to happen to that target system. And you've seen that there are
options required inside
of there, but in MSF console, it could either be used to pair and work in
conjunction with MSF
Venom or it can work independently as well. You could send exploits from an MSF
console,
and you can search and use all sorts of different variables. But just know that
if you're trying to
do a remote shell or reverse shell into a target or trying to access it in some
shape way, shape,
or form, MSF console is where it's going to be at, where MSF Venom is more
about just creating the
files and with a specific payload for whatever purpose and sending it out and
having the ability
to send it out. So inside of our MSF console, which we accessed by using pseudo
MSF console,
again, all commands below this video, you will see that it comes up very
similar to how Metasploit
opens up. And that's because this is all but like maybe one or two things away
from being the
Metasploit framework that we opened up earlier in this skill. Now there is a
couple of different
things that we can do for sure. We can definitely search for our exploits that
we want to use,
and by typing in search, it'll give you a few examples of how you want to do
this.
There are many different ways to search. You know, I'd highly encourage you
definitely go through
and take a look at this. But one of the ways that I go through and do a search
is by CVE,
as you can see here on the actual bottom of the search exclamation. For example
, search CVE
2009 type exploit, and it goes as detailed as you want. So we can very simply
type search
CVE say 2025 to see if anything's updated. And we're going to say type exploit.
And you can see here that these are all the exploits that are listed under 2025
that have a correlating
CVE with them. And by correlating, I mean that if you go in as we zoom in, you
can see in the
description that you do get the full CVE number. Now this is really good when
we go inside of our
vulnerability scans and see that a vulnerability has been discovered on a
target system and has a
correlating CVE number. And if it shows up inside of MSF console, then you know
that there has been
a way to be able to exploit that. Now that doesn't necessarily mean that it's
open and available to
be able to get to all the time. It just means that we have a possibility of
being able to break
into said system. And you can also see that line zero exploit Linux HTTP, bin
Tom, RCE, etc, etc.
That's the actual name of the module that we'll be using in order to use this
type of exploit.
And that's not necessarily the one that you're going to use all the time. It's
based on system
and all the other great stuff. We're going to copy this one right here. And we
're going to go
hit enter real quick and go use because in an MSF console, we can just say use
and not have to go
through a whole command line, a little bit more interactive and you get to go
through and use a
few more commands to customize whatever it is that you're wanting to do. Now
again, tab does work
inside of this. So I can very simply just start off with EXPL, tab over and
have exploit fill in.
And if you double tab, it'll give you all possibilities. But I'm going to do a
paste selection for the
one that we just had. Go ahead and press enter. And you can see right there
that in highlighted in
red, it sorry, highlighted in red is the actual CVE that we did a search on
broadly and then use
it as the actual exploit. Now, this is letting us know that the actual this is
what we're now
configuring under. Think of it as a subdirectory, if you will, there's still
the I the requirement of
options that are being set on this. Now we did a dash dash list dash options
previously for MSF
venom, but in this one, it's simply show options. And inside of here, you can
scroll up and actually
see all the different options that are needed. Some of the exploits that you
have inside of MSF
console require an actual payload be set. So exploit is the actual exploit that
we're implementing.
Set payload would be the follow on. And I'll show you an example of that here
momentarily.
But we can see here that inside of our show options that there are pretty much
the same output of
explanations that we got from MSF venom, where we have required dot required
optionals things like that. But in this one, you'll need a remote host IP
address. And you will need
a remote port. And there is a default in there. SSL is optional. Be host or
virtual host is optional.
So there's different different things. Now you can also see right below that it
says payload options
because it's going to have a very specific payload on this one in particular,
but you can set payload
on different ones. Now I went ahead and did a clear screen. I want to show you
an example of a
exploit that we will use kind of commonly throughout this course as a baseline
example.
In order to do this inside of where we're at right now, we would say use
exploit. Oh, sorry,
typing in the wrong screen, use exploit multi slash handler. And this is more
of a generic
exploit to use when you're not really sure whatever it is, the target that's
actually out there.
Or if you just want to be as, you know, wide net as possible, you can see that
it's using the
configured payload by default for it. And we're going to have a we're going to
set a payload for
this as well. This is just the exploit, meaning the vulnerability that we're
taking advantage of.
How are we actually going to take advantage of it is actually setting the
payload. To do this,
we're going to say set space payload. I'm tabbing over by the way. And in this
particular instance,
I'm going to use Windows. No, there we sorry, tab too quick. X 64, because I
know that the target
is going to be a 64 bit operating system for Windows meter per liter. Yep,
there we go. And
slash reverse TCP. And I'm what this is, is I'm using a reverse shell using TCP
. And you can see
that the payload has been set to reverse TCP. At this point, you want to go
into show options.
And it'll tell you everything that you need to do in order to make this work.
What is the local
host? What is the local port? And what is the exit function? Some of these
settings are required,
but already have a assignment to them, which makes it a little bit easier for
us. You just need to
know what that is. But in this particular case, if you want to set those
functions, you just simply
type set space the parameter in this case, L host. And so I'm going to say for
this one, 192.168.0.53
since that's the IP address of our Kali system here. And then in order to make
it work and actually
have it run, you just simply type exploit, regardless of which one you're in,
this more of the execution
of it. And here you can see very clearly that once I type exploit is that
started reverse TCP
handler on IP address and port number. So MSF console, you can do all that you
can do in MSF
venom plus more, but not quite all of the display framework. And it can work in
conjunction or
work separately and independent to everything else inside of the rest of the
framework.