Search
Menu
  1. Home
    1. Contact
    2. Interests
      1. Astronomy
      2. Badminton
        1. BUAofE
        2. BUAofE Training Portal
      3. Bible
        1. Logos Bible Software
        2. Biblical Hebrew
        3. Biblical Greek
      4. Bridge
      5. Guitar
  2. New
  3. Security
    1. Ethical Hacking
      1. Reconnaissance
      2. Scanning
      3. Gaining Access
      4. Maintaining Access
      5. Covering Tracks
    2. Certified Ethical Hacker
      1. CEH v8
      2. CEH v9
    3. Forensics
    4. Passwords
  4. Networking
  5. OS
    1. Linux
      1. Distros
        1. Kali
      2. File
      3. Network
      4. System
    2. Windows
  6. Tools
    1. Maltego
    2. Metasploit
    3. Nmap
    4. Wireshark
  7. Programming
    1. Java
    2. Perl
    3. PHP
    4. Python
    5. Ruby
  8. Web
    1. Hosting
    2. CMS
      1. DNN
      2. The Next Generation
    3. Database
      1. MSSQL
      2. MySQL
    4. HTML5
    5. CSS3
    6. Scripting
      1. JavaScript
      2. Razor
    7. Frameworks
      1. Bootstrap
Search
Monday, July 22, 2019
ToolsMetasploit

Metasploit

From the authors of Metasploit Unleashed (link on the right):

The Metasploit Framework (MSF) is far more than just a collection of exploits. It’s an infrastructure that you can build upon and utilize for your custom needs. This allows you to concentrate on your unique environment, and not have to reinvent the wheel. I consider the MSF to be one of the single most useful auditing tools freely available to security professionals today. From a wide array of commercial grade exploits and an extensive exploit development environment, all the way to network information gathering tools and web vulnerability plugins, the Metasploit Framework provides a truly impressive work environment.

Says it all, really! I have Kali Linux set up on at least one Linux-dedicated box (along with some other distros), as well as within a VM on my Windows 10 laptop; I also have the Metasploitable Linux VM running so that I can play around with Kali within my own network environment (far from prying eyes!) and keep my skills honed and my tools sharpened.

Metasploit Commands

Core Commands
? Help menu (this list!)
back Move back from the current context
banner Display an awesome metasploit banner (very useful command!)
cd Change the current working directory
color Toggle color
connect Communicate with a host
edit Edit the current module with $VISUAL or $EDITOR
exit Exit the console
get Gets the value of a context-specific variable
getg Gets the value of a global variable
go_pro Launch Metasploit web GUI
grep Grep the output of another command
help Help menu (this list!)
info Displays information about one or more module
irb Drop into irb scripting mode
jobs Displays and manages jobs
kill Kill a job
load Load a framework plugin
loadpath Searches for and loads modules from a path
makerc Save commands entered since start to a file
popm Pops the latest module off the stack and makes it active
previous Sets the previously loaded module as the current module
pushm Pushes the active or list of modules onto the module stack
quit Exit the console
reload_all Reloads all modules from all defined module paths
rename_job Rename a job
resource Run the commands stored in a file
route Route traffic through a session
save Saves the active datastores
search Searches module names and descriptions
sessions Dump session listings and display information about sessions
set Sets a context-specific variable to a value
setg Sets a global variable to a value
show Displays modules of a given type, or all modules
sleep Do nothing for the specified number of seconds
spool Write console output into a file as well the screen
threads View and manipulate background threads
unload Unload a framework plugin
unset Unsets one or more context-specific variables
unsetg Unsets one or more global variables
use Selects a module by name
version Show the framework and console library version numbers

Database Backend Commands
creds List all credentials in the database
db_connect Connect to an existing database
db_disconnect Disconnect from the current database instance
db_export Export a file containing the contents of the database
db_import Import a scan result file (filetype will be auto-detected)
db_nmap Executes nmap and records the output automatically
db_rebuild_cache Rebuilds the database-stored module cache
db_status Show the current database status
hosts List all hosts in the database
loot List all loot in the database
notes List all notes in the database
services List all services in the database
vulns List all vulnerabilities in the database
workspace Switch between database workspaces

Metasploit Links

Hak5 Metasploit Minute

“If I had eight hours to chop down a tree, I'd spend the first six of them sharpening my axe.”

Abraham Lincoln

Copyright 2019 by Exweeto Terms Of Use Privacy Statement