Скачать или смотреть 1.8 Metasploit Modules Payloads

What is Metasploit Payload
Type of payloads
Payload term is borrowed from transportation, where it refers to the part of the load that pays for transportation.
Also payload refers to the net deliverables like gift inside gift wrapper, water in water bottle.
Here in hacking world the payload is malware (virus, worm) that performs malicious action after exploit. Payload does its intended job avoiding detection.
Python’s easter eggs
import _hello_
prints Hello world!
Payload here is Hello world!
A payload is the shell code that runs after an exploit successfully compromises a system. The payload enables you to define how you want to connect to the shell and what you want to do to the target system after you take control of it. A payload can open a Meterpreter or command shell.
Meterpreter is an advanced payload that allows you to write DLL files to dynamically create new features as you need them.
Examples: reverse shell, meterpreter, root kits etc.
There are three payload module types
Singles (Stageless)
Standalone payloads launched on the target without connectivity back.
Stagers (Staged)
Establish network connection between attacker and victim to perform stealth actions.
Stages
Download Stages payload components.
Single and Staged Payloads
windows/shell_reverse_tcp (Single)
Staged payload is delivered in two steps - initial payload and final stage payload.
windows/shell/reverse_tcp (Staged)

Watch ‘/’ in staged payload.
Metasploit provides large collection of payloads:
windows/shell_reverse_tcp (Singles Stageless)
windows/shell/reverse_tcp (Staged)
windows/meterpreter/reverse_tcp
windows/meterpreter/reverse_https
linux/meterpreter/reverse_tcp
java/meterpreter/reverse_tcp
keylogger, rootkit, persistent shell, adware etc.

Metasploit currently has 546 payloads.
Meterpreter: Popular multi purpose payload to perform actions on target.
Reverse Shells: to run scripts or commands against the host.
Dynamic payloads (Reflective DLL Injection): for privilege escalation, evading user’s defenses like firewalls, anti virus with dynamic payload generation.
If payload is not set for an exploit. Metasploit has preference payload list and selects automatically the suitable one for the exploit.
windows/meterpreter/reverse_tcp
java/meterpreter/reverse_tcp
php/meterpreter/reverse_tcp
windows/shell/reverse_tcp
Reflective DLL Injection is a technique whereby a staged payload like meterpreter and VNC are injected into a exploited system to run in memory to go undetected.