‫A payload is a piece of code that executes on the target system, and it helps us carry out some of
‫the operations, such as connect to the command line of the target after a successful exploitation.
‫To basically understand what a payload does, let's consider a real world example.
‫So I want to show you an example that I heard a before, which helps me understand it as well.
‫Payloads are kind of an explosive material that's in the head of a missile.
‫When the missile hits the target, the explosive material causes the damage desired by the owner.
‫Now the owner of the missile can change the explosive material as well as the payload.
‫So that's the way that the Métis Boyte framework works with payloads.
‫It allows you to perform some operations on the target system.
‫For example, reverse shell is a payload that creates a connection from the target machine back to you
‫as a Windows command prompt, whereas a bind shell is a payload that binds a command prompt to a listening
‫port on the target machine, which you can then connect to.
‫This screenshot shows various categories of payload modules present in the metabolite framework.
‫So I'm going to go to the Meadows Point to rectory to view payloads.
‫I'm using Goule to be clear.
‫And here under the payload folder.
‫You're going to see three different kinds of folders named singles stagers and stages.
‫These are the main payload types.
‫Singles are the payloads that consist of the exploit and require shall code, which means they have
‫everything that is required to exploit the vulnerability on the target.
‫Naturally, the size of these payloads is pretty big.
‫Yes, it's not going to be good for if you want to be stealthy.
‫So, for example, this one Metro operator, reverse TCP.
‫And stagers, just so you know, sometimes size really matters.
‫OK, the stagers payload comes in handy in such a situation.
‫So they don't have the exploit code.
‫That means they're going to be smaller in size and it's going to help in many other test.
‫Like this one binde TCP and reverse TCP.
‫And then finally stages after the stagers communicate with a target system, stages are then uploaded
‫to the target system to do the actual actions desired by the penetration tester or attacker.
‫And here you see the interpreter payload, which is the most used stages, payload.
‫And you'll use it in many exploits, but we're going to get to that in some of the later sections.
‫All right.
‫So that's enough theory, don't you think?
‫So open up your terminal again.
‫And just like before, you can use an auxiliary module, usage is the same.
‫Use and then the payload name.
‫Use payload windows, Metropia.
‫Binde Tsipi.
‫Now, let me tell you an important point here, binde TCP payloads make the attacking machine directly
‫connect to the target.
‫So when you show the options of this module.
‫There will be our host and airport variables.
‫Our host defines the address of the target machine.
‫Now, in this case, it is the IP address of Madison Voidable to.
‫And El Port is the port number on the attacking machine that the attacking machine will listen on.
‫And then on the other hand, there is reverse TCP connections shall show you both ways.
‫Use payload.
‫Windows met Herpetic.
‫Reverse TCP.
‫When you show the options, you will see the L host and import variables, so in this case, our host
‫is the IP address of the COLLY that the target will connect back to.
‫And Al Port is the port number on the Calli that will listen for incoming connections from the target.
‫So I'm going to set our host as my IP address.
‫Let me check my address on a new tab.
‫Just want to be sure.
‫OK, tend tend to not one, one is my ipe.
‫And I'll set airport to four for four or five, then you can use run.
‫Or generate as a command to generate the shall code of this payload.
‫So this is the payload, and by scrolling down, you can view just how long it is.
‫But see, now you can use it as an exploit code.
‫But you're not going to work that way in this cause I'll tell you why coming up.