Configuring the payload and upgrade module

We need two things for this attack: a payload, which will be an executable we're fooling the updater to download instead of the real deal; and the upgrade module in Evilgrade for the specific software we're targeting. We're targeting the classic IRC client, mIRC. We need a payload first so we can configure our upgrade module accordingly, so let's generate a payload with msfvenom again.

In keeping with working our way up to the more advanced use of this tool later in the book, we'll do a couple things differently with msfvenom to generate a package that is more resistant to antimalware detection.

I start with a simple ifconfig command piping into grep the inet line, which will contain my IP address, ...

Get Hands-On Penetration Testing on Windows now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.