Metasploit Penetration Testing Cookbook - Third Edition

How to do it...

Looking at the PoC, we can see that it is using a hardcoded IP address for the target machine and a bind shell for the payload:

This means that if we want to use this exploit, we need to change the IP address to the one of our target and replace the shellcode with a reverse shell, since our target machine may have the firewall enabled. 

1. When generating shellcode, one of the things you should pay attention to is characters that shouldn't be used, also known as bad characters. A character is considered bad because it will prevent the exploit from working, for example, in a buffer overflow vulnerability, the null byte 0x00 will ...