a testing framework used for discovering, exploiting, and validating security vulnerabilities. It provides a wide range of tools for reconnaissance, exploitation, payload delivery (e.g., Meterpreter), and post-exploitation tasks.
Commands
| Purpose | Command |
|---|---|
| Start metasploit console | msfconsole |
| Search for exploits | search <keyword> |
| Use a module | use <module-path> |
| Show options to configure for the module in use | show options |
| Check to see if target is vulnerable to exploit | check |
| Run exploit | exploit |
| Exit metasploit | exit |
Any options with required set to yes needs to be set for the exploit to work.