Skip to main content

Metasploit

Metasploit is an open-source framework in cybersecurity for penetration testing, information gathering, exploit development, post-exploitation, improve security assessments, and vulnerability assessment.

tip
  • Only use Metasploit on authorized systems and during approved penetration tests
  • Keep modules and exploits updated to the latest versions
  • Document all testing activities for compliance and reporting
Start Metasploit Console. This is the primary interface for interacting with Metasploit.
msfconsole

Key Features​

  • msfconsole - Interactive command-line interface for using Metasploit
  • Modules - Pre-built exploits, payloads, scanners, and auxiliary tools
  • Tools - Stand-alone tools for specific tasks to help with vulnerability research and exploitation

Recurring Concepts​

  • Exploits - Code that takes advantage of vulnerabilities to gain unauthorized access
  • Vulnerabilities - Weaknesses in software that can be exploited by attackers
  • Payloads - Code that runs on the target system after a successful exploit
  • Post-exploitation - Actions taken after gaining access to a system, such as privilege escalation and data exfiltration