I hope this module has been helpful in your understanding of how to find,
examine, and select the right exploit module needed for testing. As a quick
review, here are the basic steps needed to configure an attack.
First, find the exploit you need.
You can use the search command to help. Select the exploit module
with the use command and a path to the exploit.
The exploit module has options that need to be reviewed and
possibly changed based on your target system with a vulnerability.
Be sure to set the target system or systems,
review the target options, and set the appropriate ones.
The payload is usually set for you,
but review the options to see if the default one is appropriate. With the
payload module set, review and alter any payload options.
If you're using a payload that creates a reverse network connection,
LHost should be set to an appropriate local IP
address of your Metasploit system.
You could also use the network adapter name.
Just be sure it picks the right IP address.
Sometimes it picks up the IPv6 address when you need an IPv4 one. And at
least review the local network service port for the listener.
Those are your basic configuration steps to getting
your exploit ready to launch.
In summary,
we spent some time in this section talking about how to
find help inside the Metasploit console.
Each command within the console has built‑in documentation to help you along.
Using the search command and its plethora of keywords,
we can narrow down our search to find the right module needed.
Using the search command and its index of available options,
we can select the right exploit module needed for our testing.
Once selected, we were able to examine information about the module.
Looking at the options,
we were also able to configure them to set up the exploit module for our needs.
Now that we know more about finding and configuring an exploit and its
payload, next we will spend some time launching an attack and determining
success based on the output inside the Metasploit console.