Modules are the core components of the Metasploit framework.
A module is a piece of software that can perform a specific action, such as scanning or exploiting
a target.
Each task that you perform using Metasploit is defined within a module to access the Metasploit framework.
You need an interface.
MSF console is the most popular interface to the Metasploit framework.
It provides an all in one centralised console and allows you efficient access to virtually all the options
available in Metasploit.
By the way, MSF castle may seem intimidating at first, but once you learn the syntax, you'll appreciate
its power.
Let's see how to use it efficiently.
To see a summary of its usage option execute MSF cancel minus H.
These are its options.
And to start it just execute MSF castle if a terminal.
Once in MSF council we can run Linux.
Cummings Like in a normal shell.
For example, if we want to check the network connection to the target, it's not necessary to open
a new technology because we can ping it from here.
Let's check again the IP address, the Metasploit, the IP address and from within MSF console, I'm
running ping minus C2.
I'm sending only two being packets and the IP address.
Great.
The Metasploit Castle is designed to be fast and easy to use and one of its most useful feature step
completion.
There are lots of Metasploit modules available and it can be difficult to remember the exact name impact
of the particular module you want to use as in the bash shell.
Entering what you know and pressing tap twice will present you with a list of options available or will
autocomplete the string?
If there is only one option.
For example, use.
Yeah.
And double taps.
He's completing the path.
Let's go ahead and talk about the MSF council commits to display a list of all available comings, along
with a description of what they are used for.
Type help or a question mark and hit enter.
Let's take a look at some important comments.
There are hundreds of modules incomings available.
Once again, a module is a piece of software that can perform a specific action, such as scanning or
exploiting each task that you can perform.
Using Metasploit is defined within a module.
Keep this in mind.
To view a list of the exploits that are available.
Execute show exploits.
If you have a general idea of what you are looking for, you can search for it via the search command.
The search comment will locate the string you are searching for.
Within the module names, descriptions or references.
Search ethics.
Search windows.
Sorry.
Search windows.
600.
These payloads, exploits or auxiliaries are all related to Android devices.
You can further narrow your search results by using other keywords or subcommittees.
Lexi The Help for Search.
For example, I am searching for windows exploits related to skill.
Search platform.
Colin Windows.
Name?
Colin Eskil.
In Pipe Colon.
Exploit.
All of these are exploits related to a skill that runs on Windows.
Platform narrows down the search to models that affect a specific platform and type Lexus filter by
module type.
There are more module types such as exploit payload, evasion, encoder or auxiliary.
To dive deeper into an exploit, you can use the info command.
It will provide you with detailed information about the particular module, including all options,
targets and other information.
For example info exploit windows.
Postgres.
And Postgres payload.
And you see here detailed information about this particular exploit.
Now pay attention.
My advice is to always read the manual help before using it because not doing so could have bad results.
You could simply break a running system.
Metasploit is not just simulating the exploit, but actually running it.
And remember, not all Metasploit modules are included in Metasploit update, but only those developed
and approved by Rapid7, the company that develops Metasploit.
If you have developed a new module or found one on GitHub, you will need to edit manually.
All right.
That was an overview of MSF canceled.
In the next lecture will see how to use the modulus and what is the common Metasploit workflow?
I'll see you right away.