We covered a lot of detail here in this module.
Let's do a review. Here we focused on the attack and what
to do after the attack is successful.
Metasploit generates a variety of messages.
We looked at the different types so that we can
understand what Metasploit is telling us.
We launched the attack with the exploit command. That
command starts any listeners needed,
executes the exploit code, and passes the payload code as well.
If all goes well,
we will have exploited the vulnerability and executed the payload.
Once the payload code is executed, we should have access to the target system.
Now we can conduct our post‑exploitation activities using any of the
post‑exploitation modules included with the Metasploit Framework or a local
exploit module to target a specific internal vulnerability and Meterpreter,
the Swiss Army knife for post exploitation.
Now that we have working exploits and executed some
post‑exploitation activities,
let's look at how we can use features of the Metasploit Framework to
be more effective and efficient in our testing.