The MSFVenom framework is replacing the msfpayload and msfencode environment. The MSFVenom framework is going to replace the msfpayload and msfencode environments on the 8th of June 2015. This will mean that a lot of new courses and trainings will be provided for the new penetration testing framework.
So what is MSFVenom
MSFVenom is a combination of the msfpayload and msfencode environment. The MSFVenom has been tested for more than 3.5 years and the environment is ready to go public. The MSFVenom environment will allow you to perform multiple actions within a couple of commands.
Let’s take a look at the MSFVenom commands which are available:
Payload to use. Specify a ‘-‘ or stdin to use custom payloads
List a module type example: payloads, encoders, nops, all
Prepend a nopsled of [length] size on to the payload
Output format (use –help-formats for a list)
The encoder to use
The architecture to use
The platform of the payload
The maximum size of the resulting payload
The list of characters to avoid example: ‘\x00\xff’
The number of times to encode the payload