We have reached the end of this course. I will summarize what we
learned and how you can continue your learning.
Here's a short summary of the topics we touched on in this course.
We started with a brief discussion on the processes around penetration testing.
I recommended reviewing the Penetration Testing Execution Standard as a way to
understand the workflow associated with penetration testing.
Our ethical concerns centered around using powerful tools like
the Metasploit Framework to help organizations,
clients, and society as a whole.
We discussed the capabilities available in Metasploit.
We covered intelligence gathering, network scanning,
vulnerability scanning, exploitation, and post‑exploitation activities.
The architecture of the framework is helpful to know so that you can find,
identify, and configure modules for unique testing scenarios.
We discussed the modular design, file system layout,
libraries, module configuration, exploits,
payloads, and Meterpreter.
We installed and configured Kali Linux as our
operating system for penetration testing.
In addition to the Metasploit Framework, Kali includes many other testing tools.
Once we had Metasploit ready,
we could set up the exploit and payload modules needed for an attack.
We looked at how to find more information about
those modules and configure them.
That preparation led to launching the attack.
Once the attack was in progress,
we needed to understand the output shown to know how the attack went.
If the attack was successful,
post‑modules or Meterpreter could be used for post‑exploitation.
Finally,
we looked at other features of the Metasploit Framework
that are useful in conducting testing.
We examined options for importing third‑party tool data,
exporting data for archiving and reporting,
managing multiple sessions, and repeating actions and scripting.
As we have advanced our knowledge of penetration testing and using the
Metasploit Framework on the Globomantics Red Team,
we've come to the realization that we have only
basic knowledge of the framework.
We need to continue training through similar courses,
hands‑on lab exercises, capture the flag events,
and other techniques to expand our knowledge and experience.
We can utilize this foundational knowledge of the Metasploit Framework and its
modules to find other useful scanners, fuzzers, exploits,
post‑modules,
scripts, and other tools included with the Metasploit framework
that can be used when testing specific targets.
With penetration testing, there are a lot of tools available.
Most of them are included or available through Kali Linux. So the
Globomantics Red Team expects that you will use Metasploit as a starting
point and branch off to other tools as needed.