Browse Library
Sign In Start Free Trial
Close icon Search icon
Account
Browse Library Sign In Start Free Trial

Add to playlist

Create a Playlist

Modal Close icon
You need to login to use this feature.
  • Book Overview & Buying Mastering Metasploit
  • Table Of Contents Toc
Mastering Metasploit

Mastering Metasploit - Second Edition

By : Nipun Jaswal
3.2 (5)
Buy this Book
close
close
Mastering Metasploit

Mastering Metasploit

3.2 (5)
By: Nipun Jaswal
Buy this Book

Overview of this book

Metasploit is a popular penetration testing framework that has one of the largest exploit databases around. This book will show you exactly how to prepare yourself against the attacks you will face every day by simulating real-world possibilities. We start by reminding you about the basic functionalities of Metasploit and its use in the most traditional ways. You’ll get to know about the basics of programming Metasploit modules as a refresher, and then dive into carrying out exploitation as well building and porting exploits of various kinds in Metasploit. In the next section, you’ll develop the ability to perform testing on various services such as SCADA, databases, IoT, mobile, tablets, and many more services. After this training, we jump into real-world sophisticated scenarios where performing penetration tests are a challenge. With real-life case studies, we take you on a journey through client-side attacks using Metasploit and various scripts built on the Metasploit framework. By the end of the book, you will be trained specifically on time-saving techniques using Metasploit.
Table of Contents (11 chapters)
close
close
close
Preface
Icon
Preface
Icon
What this book covers
Icon
What you need for this book
Icon
Who this book is for
Icon
Conventions
Icon
Reader feedback
Icon
Customer support
Lock Free Chapter
1
1. Approaching a Penetration Test Using Metasploit
chevron up
Icon
1. Approaching a Penetration Test Using Metasploit
Icon
Organizing a penetration test
Icon
Preinteractions
Icon
Intelligence gathering/reconnaissance phase
Icon
Predicting the test grounds
Icon
Setting up Kali Linux in virtual environment
Icon
The fundamentals of Metasploit
Icon
Conducting a penetration test with Metasploit
Icon
Benefits of penetration testing using Metasploit
Icon
Penetration testing an unknown network
Icon
Using databases in Metasploit
Icon
Modeling threats
Icon
Vulnerability analysis of VSFTPD 2.3.4 backdoor
Icon
Vulnerability analysis of PHP-CGI query string parameter vulnerability
Icon
Vulnerability analysis of HFS 2.3
Icon
Maintaining access
Icon
Clearing tracks
Icon
Revising the approach
Icon
Summary
2
2. Reinventing Metasploit
Icon
2. Reinventing Metasploit
Icon
Ruby – the heart of Metasploit
Icon
Developing custom modules
Icon
Breakthrough meterpreter scripting
Icon
Working with RailGun
Icon
Summary
3
3. The Exploit Formulation Process
Icon
3. The Exploit Formulation Process
Icon
The absolute basics of exploitation
Icon
Exploiting stack-based buffer overflows with Metasploit
Icon
Exploiting SEH-based buffer overflows with Metasploit
Icon
Bypassing DEP in Metasploit modules
Icon
Other protection mechanisms
Icon
Summary
4
4. Porting Exploits
Icon
4. Porting Exploits
Icon
Importing a stack-based buffer overflow exploit
Icon
Importing web-based RCE into Metasploit
Icon
Importing TCP server/ browser-based exploits into Metasploit
Icon
Summary
5
5. Testing Services with Metasploit
Icon
5. Testing Services with Metasploit
Icon
The fundamentals of SCADA
Icon
Database exploitation
Icon
Testing VOIP services
Icon
Summary
6
6. Virtual Test Grounds and Staging
Icon
6. Virtual Test Grounds and Staging
Icon
Performing a penetration test with integrated Metasploit services
Icon
Summary
7
7. Client-side Exploitation
Icon
7. Client-side Exploitation
Icon
Exploiting browsers for fun and profit
Icon
Metasploit and Arduino - the deadly combination
Icon
File format-based exploitation
Icon
Compromising Linux clients with Metasploit
Icon
Attacking Android with Metasploit
Icon
Summary
8
8. Metasploit Extended
Icon
8. Metasploit Extended
Icon
The basics of post exploitation with Metasploit
Icon
Basic post exploitation commands
Icon
Advanced post exploitation with Metasploit
Icon
Additional post exploitation modules
Icon
Advanced extended features of Metasploit
Icon
Summary
9
9. Speeding up Penetration Testing
Icon
9. Speeding up Penetration Testing
Icon
Using pushm and popm commands
Icon
The loadpath command
Icon
Pacing up development using reload, edit and reload_all commands
Icon
Making use of resource scripts
Icon
Using AutoRunScript in Metasploit
Icon
Globalizing variables in Metasploit
Icon
Automating Social-Engineering Toolkit
Icon
Summary
10
10. Visualizing with Armitage
Icon
10. Visualizing with Armitage
Icon
The fundamentals of Armitage
Icon
Scanning networks and host management
Icon
Exploitation with Armitage
Icon
Post-exploitation with Armitage
Icon
Attacking on the client side with Armitage
Icon
Scripting Armitage
Icon
Summary
Icon
Further reading

Conducting a penetration test with Metasploit

After setting up Kali Linux, we are now ready to perform our first penetration test with Metasploit. However, before we start the test, let us recall some of the basic functions and terminologies used in the Metasploit framework.

Recalling the basics of Metasploit

After we run Metasploit, we can list all the workable commands available in the framework by typing help in Metasploit console. Let us recall the basic terms used in Metasploit, which are as follows:

  • Exploits: This is a piece of code that, when executed, will exploit the vulnerability on the target.
  • Payload: This is a piece of code that runs at the target after a successful exploitation is done. It defines the actions we want to perform on the target system.
  • Auxiliary: These are modules that provide additional functionalities such as scanning, fuzzing, sniffing, and much more.
  • Encoders: Encoders are used to obfuscate modules to avoid detection by a protection mechanism such as an antivirus or a firewall.
  • Meterpreter: Meterpreter is a payload that uses in-memory DLL injection stagers. It provides a variety of functions to perform at the target, which makes it a popular payload choice.

Let us now recall some of the basic commands of Metasploit that we will use in this chapter. Let us see what they are supposed to do:

Command

Usage

Example

use [Auxiliary/Exploit/Payload/Encoder]

To select a particular module to start working with

 

msf>use exploit/unix/ftp/vsftpd_234_backdoor


msf>use auxiliary/scanner/portscan/tcp

show [exploits/payloads/encoder/auxiliary/options]

To see the list of available modules of a particular type

 

msf>show payloads


msf> show options

set [options/payload]

To set a value to a particular object

 

msf>set payload windows/meterpreter/reverse_tcp


msf>set LHOST 192.168.10.118


msf> set RHOST 192.168.10.112


msf> set LPORT 4444


msf> set RPORT 8080

setg [options/payload]

To set a value to a particular object globally so the values do not change when a module is switched on

 

msf>setg RHOST 192.168.10.112

run

To launch an auxiliary module after all the required options are set

 

msf>run

exploit

To launch an exploit

 

msf>exploit

back

To unselect a module and move back

 

msf(ms08_067_netapi)>back


msf>

info

To list the information related to a particular exploit/module/auxiliary

 

msf>info exploit/windows/smb/ms08_067_netapi


msf(ms08_067_netapi)>info

search

To find a particular module

 

msf>search hfs

check

To check whether a particular target is vulnerable to the exploit or not

 

msf>check

sessions

To list the available sessions

 

msf>sessions [session number]

Following are the meterpreter commands:

Meterpreter Commands

Usage

Example

sysinfo

To list system information of the compromised host

 

meterpreter>sysinfo

ifconfig

To list the network interfaces on the compromised host

 

meterpreter>ifconfig


meterpreter>ipconfig (Windows)

Arp

List of IP and MAC addresses of hosts connected to the target

 

meterpreter>arp

background

To send an active session to background

 

meterpreter>background

shell

To drop a cmd shell on the target

 

meterpreter>shell

getuid

To get the current user details

 

meterpreter>getuid

getsystem

To escalate privileges and gain SYSTEM access

 

meterpreter>getsystem

getpid

To gain the process ID of the meterpreter access

 

meterpreter>getpid

ps

To list all the processes running on the target

 

meterpreter>ps

Note

If you are using Metasploit for the very first time, refer to http://www.offensive-security.com/metasploit-unleashed/Msfconsole_Commands for more information on basic commands.

CONTINUE READING
83
Tech Concepts
36
Programming languages
73
Tech Tools
Icon Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.
Icon Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.
Icon 50+ new titles added per month and exclusive early access to books as they are being written.
Mastering Metasploit
End of Section 1
Next Section
notes
bookmark Notes and Bookmarks search Search in title playlist Add to playlist download Download options
font-size Font size

Change the font size

margin-width Margin width

Change margin width

day-mode Day/Sepia/Night Modes

Change background colour

Close icon Search
Country selected
Close icon Your notes and bookmarks

Confirmation

Modal Close icon
claim successful
Order Page Read Now

Buy this book with your credits?

Modal Close icon
Are you sure you want to buy this book with one of your credits?
Close
YES, BUY

Submit Your Feedback

Modal Close icon
Modal Close icon
Modal Close icon