Video Demonstrates Embedding a Reverse-TCP Payload in a Windows Executable

Summary

The video demonstrates using Shelter to embed custom reverse-TCP shellcode in nc.exe, host the payload from Kali Linux, and open the modified executable to obtain a remote shell on Windows.

Key points

• The demonstration uses Shelter to embed shellcode into the Windows executable nc.exe.
• A reverse-TCP shellcode payload is generated on Kali Linux and hosted for download.
• The video configures a Netcat listener and opens the modified executable on Windows.
• The presenter shows the resulting remote shell and access to files in the working directory.

MITRE ATT&CK

Related Articles

• DarkMe RAT Campaign Uses Phishing and PIF Files Instead of Exploitshuntress.comT1095 · T1204.002
• HVNC Backdoor Uses Fake Tax and DocuSign Lures to Target Latin American Organizationsany.runT1095 · T1204.002
• TA4922 Deploys PackClient RAT in Tax-Themed Phishing Campaigns Targeting China and Indiaproofpoint.comT1095 · T1204.002
• Researchers Detail ValleyRAT Campaign Using Signed Overwolf Binary to Sideload Malwareforcepoint.comT1095 · T1204.002
• Malspam Campaign Delivers Fileless .NET Loader That Disables Windows Defenseshuntress.comT1095 · T1204.002