‫Now, I think one can more easily understand the Metasploit architecture by taking a look under its
‫hood and learning how to use Metasploit.
‫It's better to take some time to make ourselves familiar with its file system.
‫So let's go to Carly and open a terminal screen.
‫To find the location of Metasploit Framework, I use the Locate Command.
‫So here is the Metasploit Framework home use the CD command to go there.
‫And yells Command to see the files and folders inside the Metasploit home folder.
‫So look at this.
‫There are executables and directories, and of course, I'm in folders here.
‫So note that near the bottom, there's a directory called scripts.
‫Now this includes, among other things, interpreter scripts such as hash dump that enables us to gather
‫user hashes of the exploited system.
‫Also note that the executables MSF console, MSF Update, MSF, Venom and more.
‫MSF Venom is the Metasploit standalone payload generator, and we're going to see massive console and
‫the MSF update in detail.
‫So let us now explore the Metasploit modules.
‫These are the blood and guts of motorsport.
‫You cede command to enter the Modules Directory and the list command to see the files.
‫Now, I hope you're seeing what I'm seeing, because Metasploit contains multiple modules, so these
‫include source codes which exploit the vulnerabilities are in the exploits folder.
‫And as I told you before, the payload is the portion of the malware which performs malicious action.
‫The payloads are located in the Payloads folder.
‫Encoders inside the encoders folder are the various algorithms and encoding schemes that Metasploit
‫can use to re encode the payloads.
‫These may be used to bypass the security measures such as IDs, IPS or firewalls.
‫Auxiliary modules are for a variety of purposes other than exploitation.
‫You can create your own quick vulnerability scanners, port scanners and do a whole lot of other cool
‫stuff.
‫Modules used for post exploitation are in a post folder, and as I told you before, the post exploitation
‫basically uses the exploited system as much as possible so we can collect more data and compromise more
‫systems in the target network.
‫And here is no operation abbreviated A.P. modules inside, they're not folder.
‫Keep the payload sizes consistent, so let's look inside the exploits folder in detail.
‫Again, the CD command to get in the allies command to look at the files and folders inside.
‫They exploited Holder is basically broken down into subdirectories that are specific to the operating
‫system and device types.
‫We're attempting to exploit, for instance, you can see at the top the X folder, which contains the
‫exploits developed for IBM's proprietary Unix operating system, and the Multi folder contains the exploits
‫which run in cross platforms.
‫So drilled down further into the exploit folder, I want to go to Windows Bellis to see the folder details.
‫Now we can see that the Windows exploits are broken down into types of windows exploits.
‫It's important to note that the exploits are very specific.
‫Not only are they operating system specific, but also application or service specific, port specific
‫and sometimes even language specific.
‫So let's look inside one of the sub folders here.
‫I'll choose the SMB folder.
‫And here are the exploit codes for SMB service.
‫Peace exec, for example, one of them, which we will be using in this course.
‫So now let's turn back to the Modules folder.
‫Now I'd like to show you the payloads folder.
‫Now, if you can see here, the payloads are grouped by the types, singles, stages and stages.
‫We'll talk about them in the following lectures.
‫Now let's see what's inside the subfolders, for example, singles.
‫And once again, we can see that the Metasploit Framework categorizes the payloads by operating system
‫and device types.
‫I'll go to the generic folder and list the files and folders with the illness command.
‫And here are the source codes of the generic payload.