‫You're with me.
‫Good.
‫Everything is OK, so let's start getting our hands dirty.
‫And because Metasploit Framework is embedded in college, you can type MSF console in any location in
‫the terminal screen to start Metasploit Framework console interface.
‫You'll be facing the shell like MSF interface in just a few seconds.
‫And here we have a summary numbers of exploits, auxiliaries and post modules and numbers of payloads
‫and coders and knobs.
‫The first command that you should learn in MSV console is, of course, help.
‫The health command lists all the commands you can use at this point.
‫And you heard me correctly, I do say at this point, because any module you load may add some new commands
‫you can use and we'll see soon, and I'll let it go for now, as you can see the commands a group.
‫Here are the core command module commands.
‫Job Command's resource script commands and credential back end commands.
‫Now, the search for a module you want to use, for example, to see the available exploits developed
‫to exploit net API vulnerabilities.
‫You can simply use the search command with a keyword.
‫And here are the results exploits for several net API vulnerabilities.
‫The first one is to exploit the RMS zero three Dash zero four nine vulnerability, and we have four
‫exploits for four different net API vulnerabilities.
‫Now you can see the columns name of the module, disclose your date, rank and description of the module.
‫Since the names of the other columns explain themselves, let's talk about the ranks.
‫In Metasploit Framework, the exploits are ranked to help us select the appropriate export.
‫Here are all the ranks and their meanings.
‫Starting off with excellent.
‫The exploit will never crash the surface.
‫This is the case for a sequel, injection, CMT execution, RFI, La Vie, et cetera.
‫No typical memory corruption exploit should be given this ranking unless there are extraordinary circumstances.
‫Great.
‫The exploit has a default target and either auto detects the appropriate target or uses an application
‫specific return address after a version check.
‫So good is that the exploit has a default target, and it is the common case for this type of software.
‫English Windows seven for desktop app, 2012 for server, etc..
‫So normal, this exploit is otherwise reliable, but depends on a specific version and can't or doesn't
‫reliably auto detect.
‫Average, the exploit is generally unreliable or difficult to exploit.
‫And low, the exploit is nearly impossible to exploit or under 50 percent success rate for common platforms,
‫and Manuwa exploit is unstable or difficult to exploit and is basically a D.O.C..
‫This ranking is also used when the module has no use unless specifically configured by the user.
‫For example, exploited slash Unix slash web apps slash evil.