Metasploit framework

<yambe:breadcrumb self="Metasploit framework">Penetration testing tools|Penetration testing tools</yambe:breadcrumb>

Installing metasploit

1. Download latest metasploit full edition for 64-bit Linux from http://www.metasploit.com/download/
2. Use 'chmod +x framework-3.7.1-linux-x64-full.run'
3. Run installer using './framework-3.7.1-linux-x64-full.run' in GUI mode. Option '--mode text' can be used in case GUI is not available. Option '--mode unattended' can be used to install with all default values.
4. One can download metaexploit framework user guides from http://www.metasploit.com/learn-more/how-do-i-use-it/documentation.jsp to learn how to install or use it. There are manuals on metaexploit API too.

Updaing metasploit

Use 'svn update msf3' command after chaning PWD to '/opt/framework-3.7.1'

Using metaexploit console

Startin console

One can access metaexploit console using 'msfconsole' command

Getting help

We can use 'help' command to get help on using console.

Searching exploits

Use 'search <regular_expression>' to search for interesting exploits. For example:

search linux\/http
search portscan

Getting detailed information on a exploit

Use 'info <exploit_name>' go get detailed information on exploit. For example:

info scanner/portscan/tcp

This also lists the various parameters that module requires and there values

Setting parameter values

Use 'setg' command to set parameter values. For example:

setg RHOSTS 10.100.1.107

Using exploit

Use 'use <exploit_name>' to use an exploit. For example:

 use scanner/portscan/tcp

This will take you to exploit console. Note:

• We can use 'help' in exploit console to see exploit related help.
• At exploit console we can use 'check' to see if remote host is vulnerable. Not all exploits support check.
• We can use 'exploit' to launch attack on vulnerable hosts
• We can use 'back' to go back to main context
• We can use 'Ctrl +C' to stop exploit if it is taking time.

Starting metaexploit GUI

Use command 'msfgui' to start metaexploit framework GUI. Choose option for starting new msfrpcd daemon.

<yambe:breadcrumb self="Metasploit framework">Penetration testing tools|Penetration testing tools</yambe:breadcrumb>