Metasploit Framework
Penetration Testing 7 commands

Metasploit Framework

World's most used penetration testing framework. Provides information about security vulnerabilities and aids in penetration testing and IDS signature development.

exploitationpentestingpost-exploitationframework
Official docs

Installation

# Kali Linux (pre-installed)
sudo apt install metasploit-framework
# or
curl https://raw.githubusercontent.com/rapid7/metasploit-omnibus/master/config/templates/metasploit-framework-wrappers/msfupdate.erb > msfinstall && chmod 755 msfinstall && ./msfinstall

Commands & usage

7 entries
  • msfconsole

    Start Metasploit console

  • search <keyword>

    Search for modules

  • use <module>

    Select a module

  • set RHOSTS <target>

    Set target host

  • exploit / run

    Execute the module

  • sessions -l

    List active sessions

  • msfvenom -p <payload> LHOST=<ip> LPORT=<port> -f <format>

    Generate payloads

Use cases

ExploitationPayload generationPost-exploitationVulnerability validationSocial engineering