Metasploit 11.1 - DefiantCoder/Tech-Journals GitHub Wiki

Start Metasploit:

sudo msfconsole

use this to search through Metasploit can be used to find related exploits (phpmyadmin for example)

search <enter search here>

this gives a list of available options

options

the object name is shown in options and you enter your desired value

set <option name> <value>

this allows you to view the available payloads for the module

show payloads

this makes sure your current settings can run the exploit

check

this will execute the above parameters on the target

exploit

views all active sessions

sessions -i

uses a particular session

sessions -i <id number>

accesses the shell

shell

uses a neater version of the shell

python3 -c 'import pty; pty.spawn("/bin/bash")'

Reflection

Metasploit is an amazing tool that greatly increases the efficiency of exploiting targets. It takes time to learn everything you need for operating Metasploit but once you do it will assist you across the board. on a case by case basis Metasploit make take more effort than a hand crafted exploit and cannot work in all cases but overall it makes exploiting easier.

⚠️ **GitHub.com Fallback** ⚠️