LHOST (Local Host):
This refers to the attacker's own system, the one from which the attack or exploit is initiated. It specifies the IP address or domain name of your machine where a listener will be running to receive connections from the target system. In essence, it tells the exploit payload where to "call home" after achieving access on the target. LHOST is primarily used in scenarios where a reverse shell is established - the target system connects back to the attacker's system for further interaction.
RHOST (Remote Host):
This refers to the target system, the one being attacked or exploited. It specifies the IP address or domain name of the system you want to gain access to or exploit. It tells the exploit where to send the malicious payload or attack code. RHOST is used in both direct shell and reverse shell scenarios.
