Practical Web Penetration Testing

Listener setup

Before uploading and executing the payload, you will need to set up and execute a listener on Kali Linux.

To create a listener using Metasploit, enter the following:

use exploit/multi/handlerset PAYLOAD [msfvenom Payload name]set LHOST [Kali IP address]set LPORT [Listening port on Kali]set ExitOnSession falseexploit -j -z

To create a listener using netcat, use the following:

nc -nlvp [listening port on Kali]