Welcome to this module in which we will discuss the
capabilities of the Metasploit Framework.
We'll spend a little time talking about the capabilities of Metasploit from the
perspective of the Penetration Testing Execution Standard.
First up,
we discuss how the framework can be used in gathering
information about targets on the network.
We look at its capability to scan networks for details about target systems.
The framework can also identify vulnerabilities in those targets.
And now, the Metasploit Frameworks true purpose,
exploitation of those vulnerabilities.
It also has a wealth of capabilities in exploring and
maintaining access to those compromised systems.
In order to learn the Metasploit Framework and to converse with other users,
you'll need to learn the terminology and the components of the framework.
Modules are the heart of Metasploit.
Most of the functionality of the framework is provided through its modules.
There are various scanners, which are auxiliary modules. Exploits are modules.
They attempt to test a vulnerability by exploiting the weaknesses of a system.
A payload is code delivered to the target system to provide
access or to take control of the target system.
A payload may contain simple commands or more sophisticated remote access tools.
The Metasploit Framework can be used through different interfaces.
For this course, we're focusing only on one, the command line.
The command line offers all of the capabilities of the Metasploit
Framework through a relatively easy‑to‑use text interface.
In our roles as members of the Red Team at Globomantics, we need to study the
Metasploit Framework since a lot of our work is based on this tool. We will use
other tools certainly, but our initial focus is on the Metasploit Framework as
it has a central role in exploitation of vulnerabilities that we will find as we
conduct penetration testing.
Now let's take a look at the various capabilities
provided by the Metasploit Framework.