Metasploit 11.1 - DefiantCoder/Tech-Journals GitHub Wiki
Start Metasploit:
sudo msfconsole
use this to search through Metasploit can be used to find related exploits (phpmyadmin for example)
search <enter search here>
this gives a list of available options
options
the object name is shown in options and you enter your desired value
set <option name> <value>
this allows you to view the available payloads for the module
show payloads
this makes sure your current settings can run the exploit
check
this will execute the above parameters on the target
exploit
views all active sessions
sessions -i
uses a particular session
sessions -i <id number>
accesses the shell
shell
uses a neater version of the shell
python3 -c 'import pty; pty.spawn("/bin/bash")'
Metasploit is an amazing tool that greatly increases the efficiency of exploiting targets. It takes time to learn everything you need for operating Metasploit but once you do it will assist you across the board. on a case by case basis Metasploit make take more effort than a hand crafted exploit and cannot work in all cases but overall it makes exploiting easier.