Exweeto > Tools > Metasploit

Home
1. Contact
2. Interests
  Astronomy
  
  Badminton
  
  BUAofE
  
  BUAofE Training Portal
  
  Bible
  
  Logos Bible Software
  
  Biblical Hebrew
  
  Biblical Greek
  
  Bridge
  
  Guitar
New
Security
Networking
OS
1. Linux
  Distros
  
  Kali
  
  File
  
  Network
  
  System
2. Windows
Tools
1. Maltego
2. Metasploit
3. Nmap
4. Wireshark
Programming
1. Java
2. Perl
3. PHP
4. Python
5. Ruby
Web
1. Hosting
2. CMS
  DNN
  
  The Next Generation
3. Database
  MSSQL
  
  MySQL
4. HTML5
5. CSS3
6. Scripting
  JavaScript
  
  Razor
7. Frameworks
  Bootstrap

Wednesday, December 07, 2022

Metasploit

From the authors of Metasploit Unleashed (link on the right):

The Metasploit Framework (MSF) is far more than just a collection of exploits. It’s an infrastructure that you can build upon and utilize for your custom needs. This allows you to concentrate on your unique environment, and not have to reinvent the wheel. I consider the MSF to be one of the single most useful auditing tools freely available to security professionals today. From a wide array of commercial grade exploits and an extensive exploit development environment, all the way to network information gathering tools and web vulnerability plugins, the Metasploit Framework provides a truly impressive work environment.

Says it all, really! I have Kali Linux set up on at least one Linux-dedicated box (along with some other distros), as well as within a VM on my Windows 10 laptop; I also have the Metasploitable Linux VM running so that I can play around with Kali within my own network environment (far from prying eyes!) and keep my skills honed and my tools sharpened.

Metasploit Commands

Core Commands
`?`	Help menu (this list!)
`back`	Move back from the current context
`banner`	Display an awesome metasploit banner (very useful command!)
`cd`	Change the current working directory
`color`	Toggle color
`connect`	Communicate with a host
`edit`	Edit the current module with $VISUAL or $EDITOR
`exit`	Exit the console
`get`	Gets the value of a context-specific variable
`getg`	Gets the value of a global variable
`go_pro`	Launch Metasploit web GUI
`grep`	Grep the output of another command
`help`	Help menu (this list!)
`info`	Displays information about one or more module
`irb`	Drop into irb scripting mode
`jobs`	Displays and manages jobs
`kill`	Kill a job
`load`	Load a framework plugin
`loadpath`	Searches for and loads modules from a path
`makerc`	Save commands entered since start to a file
`popm`	Pops the latest module off the stack and makes it active
`previous`	Sets the previously loaded module as the current module
`pushm`	Pushes the active or list of modules onto the module stack
`quit`	Exit the console
`reload_all`	Reloads all modules from all defined module paths
`rename_job`	Rename a job
`resource`	Run the commands stored in a file
`route`	Route traffic through a session
`save`	Saves the active datastores
`search`	Searches module names and descriptions
`sessions`	Dump session listings and display information about sessions
`set`	Sets a context-specific variable to a value
`setg`	Sets a global variable to a value
`show`	Displays modules of a given type, or all modules
`sleep`	Do nothing for the specified number of seconds
`spool`	Write console output into a file as well the screen
`threads`	View and manipulate background threads
`unload`	Unload a framework plugin
`unset`	Unsets one or more context-specific variables
`unsetg`	Unsets one or more global variables
`use`	Selects a module by name
`version`	Show the framework and console library version numbers
Database Backend Commands
`creds`	List all credentials in the database
`db_connect`	Connect to an existing database
`db_disconnect`	Disconnect from the current database instance
`db_export`	Export a file containing the contents of the database
`db_import`	Import a scan result file (filetype will be auto-detected)
`db_nmap`	Executes nmap and records the output automatically
`db_rebuild_cache`	Rebuilds the database-stored module cache
`db_status`	Show the current database status
`hosts`	List all hosts in the database
`loot`	List all loot in the database
`notes`	List all notes in the database
`services`	List all services in the database
`vulns`	List all vulnerabilities in the database
`workspace`	Switch between database workspaces

Metasploit Links

Metasploit Homepage ...
World's most used penetration testing software.
Metasploit on GitHub ...
For the latest Metasploit stuff!
Wikipedia on Metasploit ...
The Metasploit Project is a computer security project that provides information about security vulnerabilities and aids in penetration testing and IDS signature development.
Metasploit Unleashed ...
The Metasploit Unleashed ethical hacking training course is provided free of charge to the community by Offensive Security in an effort to raise funds and awareness for underprivileged children in East Africa.
Metasploit Course on Cybrary ...
Coming soon...!
Metasploitable ...
Metasploitable is an intentionally vulnerable Linux virtual machine. This VM can be used to conduct security training, test security tools, and practice common penetration testing techniques. The default login and password is msfadmin:msfadmin. Never expose this VM to an untrusted network (use NAT or Host-only mode if you have any questions what that means).
Armitage ...
Armitage is a scriptable red team collaboration tool for Metasploit that visualizes targets, recommends exploits, and exposes the advanced post-exploitation features in the framework.

Hak5 Metasploit Minute

Hak5.org did a great series of Metasploit videos, presented by Mubix (aka Rob Fuller):

“If I had eight hours to chop down a tree, I'd spend the first six of them sharpening my axe.”

Abraham Lincoln

Metasploit

Metasploit Commands

Core Commands

Database Backend Commands

Metasploit Links

Hak5 Metasploit Minute