Well,
that was a lot of information on the architecture and
components of the Metasploit Framework.
Let's do a quick review.
We spent time looking at the various pieces of the Metasploit
Framework. We started with its modular design.
This software development approach allows Metasploit developers to create
individual components, known as modules, to add and extend functionality to the
framework over time. We looked at how that modular approach was implemented in
the layout of the files of the framework.
We discussed some of the key libraries utilized in Metasploit and how module
developers can use the libraries to save development time.
Since Metasploit uses modules,
it's helpful to understand how they are selected and configured for use.
We discussed some of the Metasploit console commands and
the options available for modules.
Exploits are the key to testing with Metasploit. We looked at how to find
and configure the various exploits in the framework.
Payloads allow action after the exploit has been triggered.
We discussed the approach and types of payloads available,
including Meterpreter,
which is Metasploit's Swiss Army knife of post exploitation.
It allows a tester to thoroughly explore a compromised
target system and pivot to other systems.
Next up, we'll get our hands dirty,
so to speak, with the installation and
configuration of the metasploit Framework.