In our challenge, we were challenging ourselves to see if we could create a bad
file using
MSF Venom.
And I've done just that, and I'm going to say how I did it, and you can go
through and
see if you could do the same, or if you want to create another one just to get
some more
practice in.
What we're really taking a look at here is just running a quick command, and I
'll have
this below the video of pseudo MSF Venom with dash BEP and BNR payload.
Now in this particular one, I went with Windows X64, so 64-bit Windows
operating systems,
doing a reverse TCP connection using PowerShell.
PowerShell exploit.
So this works if we find vulnerabilities on our target system pertaining to
PowerShell
or PowerShell related.
And the dash F of file type of PS1, meaning it's going to be a PowerShell
script, right?
So if this gets, it was exported as output trick.ps1.
So if you rename it, send it somewhere else, and they run it as a PowerShell
script, and
it opens up, it's going to lock into that process and commit to that reverse
TCP connection
is trying to do.
I also opened this up in Notepad++, the Kali version of it, to show you because
I picked
P.S.1 to be able to see what it looked like inside of actual PowerShell
language, or PowerShell
script.
You can see here that it says byte buff is a variable, and then, xxxxxxxxxxxxxx
xxxx.
It fills the rest of it up with hex code.
So it's done in such a way to where the user, normal users, don't necessarily
know what
this is, but it will convert that hex into actual understandable string for the
system
and run it inside of the actual PowerShell environment if ran, and it gets even
worse
if they run it as administrator.
So this is just one quick method of creating a bad file to send to a target
system inside
of MSF Venom, just to be able to get some practice in.
And as the course unfolds, that we will definitely be getting some more
practice in using Metasploit
framework overall to be able to help us in the course of our Pintest that we're
totally
within the scope and rules of engagement of.
I hope this has been informative for you, and I'd like to thank you for viewing
.
[ Silence ]