Choose the payload for your attack. The payload determines what will happen once you
have breached the target’s defenses. It may set an open terminal or plant a virus. There are
thousands of payloads available in the Metasploit framework. To find the right payload for
your current attack, type:
payloads
4. The ideal payload for this lesson is “windows/shell_bind_tcp”. This payload opens
a shell (or command prompt) in the target through a TCP port. You can set this
payload by typing:
set PAYLOAD windows/shell_bind_tcp
5. Now that you have specified each aspect of the attack, type “run”.
6. Metasploit will tell you that a shell has been opened in your target computer. That
shell gives you administrator privileges over your target. You may download files
from that computer or send programs to it. You may also obtain screenshots of the
computer if you want.
How to Use a Meterpreter on an XP Computer
Meterpreters are the strongest payloads that you can use. They give you complete control
over the infected machine. In this lesson, you’ll know how to send a meterpreter using
Metasploit.
Important Note: This process is similar to the previous one. The only difference is that
you’ll use a different type of payload. To keep this book short, let’s just use the
information you collected earlier (the IP address and the open ports). The remaining stages
of the attack are:
1. Identify the IP address of your Kali Linux computer.
Payloads have different requirements. For example, a payload may only need the IP
address of your target. Some payloads, however, require the IP address of the attack – and
meterpreters belong to this group. That means you need to set the IP of your computer as
LHOST of a meterpreter payload.
If you don’t know the IP address of your Kali computer, launch a terminal and type:
have breached the target’s defenses. It may set an open terminal or plant a virus. There are
thousands of payloads available in the Metasploit framework. To find the right payload for
your current attack, type:
payloads
4. The ideal payload for this lesson is “windows/shell_bind_tcp”. This payload opens
a shell (or command prompt) in the target through a TCP port. You can set this
payload by typing:
set PAYLOAD windows/shell_bind_tcp
5. Now that you have specified each aspect of the attack, type “run”.
6. Metasploit will tell you that a shell has been opened in your target computer. That
shell gives you administrator privileges over your target. You may download files
from that computer or send programs to it. You may also obtain screenshots of the
computer if you want.
How to Use a Meterpreter on an XP Computer
Meterpreters are the strongest payloads that you can use. They give you complete control
over the infected machine. In this lesson, you’ll know how to send a meterpreter using
Metasploit.
Important Note: This process is similar to the previous one. The only difference is that
you’ll use a different type of payload. To keep this book short, let’s just use the
information you collected earlier (the IP address and the open ports). The remaining stages
of the attack are:
1. Identify the IP address of your Kali Linux computer.
Payloads have different requirements. For example, a payload may only need the IP
address of your target. Some payloads, however, require the IP address of the attack – and
meterpreters belong to this group. That means you need to set the IP of your computer as
LHOST of a meterpreter payload.
If you don’t know the IP address of your Kali computer, launch a terminal and type: