meterpreter-Venom免杀
<div class="essayuser-middlepart" id="content" style="padding:10px;"><pre class="sh_c">
<p>
1.从Github上下载框架：
</p>
tar.gz OR zip OR git clone
2.赋予文件可执行权限：
cd venom-main
sudo chmod -R +x *.sh
sudo chmod -R +x *.py
3.安装依赖关系包：
cd aux
sudo ./setup.sh
4.运行
sudo ./venom.sh</pre>
<p>
<span style="font-size:16px;">目标机：win7 sp1 ip：192.168.0.104</span>
</p>
<p>
<span style="font-size:16px;">攻击机：kali 2.0 ip：192.168.149.129</span>
</p>
<p>
<br />
</p>
<p>
<span style="font-size:16px;">运行后提示按ENTER（回车）</span><br />
<br />
<span style="font-size:16px;">会出现一个目录菜单</span>
</p>
<p>
<span style="font-size:16px;">这里利用目标机的Powershell来反弹shell</span><br />
<br />
<span style="font-size:16px;">选择11</span><br />
<br />
<span style="font-size:16px;">然后提示输入本机ip</span><br />
<a target="_blank" href="https://www.0dayhack.com/content/plugins/kl_album/upload/201709/10fb15c77258a991b0028080a64fb42d201709042244502105261859.png" class="swipebox"></a>
</p>
<p>
<span style="font-size:16px;">提示输入端口</span>
</p>
<p>
<a target="_blank" href="https://www.0dayhack.com/content/plugins/kl_album/upload/201709/09dd8c2662b96ce14928333f055c5580201709042244501520905587.png" class="swipebox"></a>
</p>
<p>
<span style="font-size:16px;">然后输入代码的名称</span>
</p>
<p>
<a target="_blank" href="https://www.0dayhack.com/content/plugins/kl_album/upload/201709/8266e4bfeda1bd42d8f9794eb4ea0a13201709042244501361637217.png" class="swipebox"></a>
</p>
<p>
<span style="font-size:16px;">选中监听模块</span>
</p>
<p>
<a target="_blank" href="https://www.0dayhack.com/content/plugins/kl_album/upload/201709/f19c9085129709ee14d013be869df69b20170904224450336137900.png" class="swipebox"></a>
</p>
<p>
<span style="font-size:16px;">确定反弹模块</span>
</p>
<p>
<a target="_blank" href="https://www.0dayhack.com/content/plugins/kl_album/upload/201709/9eb9cd58b9ea5e04c890326b5c1f471f20170904224451654415437.png" class="swipebox"></a>
</p>
<p>
<span style="font-size:16px;">确定后会在Venom/output目录下生成需要的payload，并且启动一个msf监听的小窗口</span>
</p>
<p>
<br />
</p>
<p>
<span style="font-size:16px;">将trigger.bat放到目标机上，sf.ps1放到/var/www/html目录下</span><br />
<br />
<span style="font-size:16px;">打开apache服务</span>
</p>
<p>
<span style="font-size:16px;">运行bat文件后会利用powershell去远程执行http://192.168.149.129/sf.ps1的文件</span>
</p>
<p>
<br />
</p>
<p>
<span style="font-size:16px;">作者QQ：1340236378</span>
</p>
<p>
<span style="font-size:16px;">微信：xie-xie-xie6</span>
</p>
<p>
<span style="font-size:16px;">出现问题可询问，本教程只为网络安全学习</span>
</p>
</div>
页:
[1]