‫Using MSF venom, you can create more complicated malware doing this, you may suppose it will not be
‫easy for the security systems to recognize the malware.
‫Look at the examples seen in the slide.
‫You can use dashi parameter to encode the payload.
‫You can use MSF Venom Dash El Encoders to see the list of encoders with the dashi parameter.
‫You can encode the payload several times.
‫In this example it was 10 times.
‫Darshak is used to preserve the template behavior and inject the payload is a new thread.
‫If you use this option, the size of the output file becomes a bit bigger than the template file.
‫But do not forget that you are still using a standard metal like payload.
‫Let's take a closer look at the listener.
‫If you use a payload with a reverse connection, also known as a connect back, you, the attacker,
‫have set up a listener first on your box.
‫The victim or target machine acts as a client connecting to that listener.
‫And then finally, you receive the session.
‫Exploits multigrain handler module of Métis flight framework is used to collect and manage multiple
‫sessions from different platforms, you can see the detailed options of the handler using show advanced
‫command.
‫If you set exit on Zeshan False, the handler continues to listen when an active session is killed.
‫Set the same payload with the malware and set the option of the payload, if you run the handler using
‫the exploit dash J command, the handler runs in the background.
‫When a session is opened, a message appears.
‫Use session Dash L Command to list the active sessions.
‫To activate a session use session that I command with the I.D. number of that session.
‫You can use background command to send the session background.
‫Use session Darshak with session ID to kill a session, if you use Dask uppercase K parameter, you
‫kill all captured sessions.