Book Image

Mastering Metasploit. - Second Edition

By : Nipun Jaswal
Book Image

Mastering Metasploit. - Second Edition

By: Nipun Jaswal

Overview of this book

Metasploit is a popular penetration testing framework that has one of the largest exploit databases around. This book will show you exactly how to prepare yourself against the attacks you will face every day by simulating real-world possibilities. We start by reminding you about the basic functionalities of Metasploit and its use in the most traditional ways. You’ll get to know about the basics of programming Metasploit modules as a refresher, and then dive into carrying out exploitation as well building and porting exploits of various kinds in Metasploit. In the next section, you’ll develop the ability to perform testing on various services such as SCADA, databases, IoT, mobile, tablets, and many more services. After this training, we jump into real-world sophisticated scenarios where performing penetration tests are a challenge. With real-life case studies, we take you on a journey through client-side attacks using Metasploit and various scripts built on the Metasploit framework. By the end of the book, you will be trained specifically on time-saving techniques using Metasploit.

Related Content you might be interested in

Current Title:

Small book image
Mastering Metasploit. - Second Edition
Nipun Jaswal
Sep, 2016 | 440 pages
No titles found
Table of Contents (17 chapters)
Mastering Metasploit
Mastering Metasploit
Credits
Credits
Foreword
Foreword
About the Author
About the Author
About the Reviewer
About the Reviewer
www.PacktPub.com
www.PacktPub.com
Preface
Preface
Free Chapter
1
Approaching a Penetration Test Using Metasploit
Approaching a Penetration Test Using Metasploit
Organizing a penetration test
Preinteractions
Intelligence gathering/reconnaissance phase
Predicting the test grounds
Setting up Kali Linux in virtual environment
The fundamentals of Metasploit
Conducting a penetration test with Metasploit
Benefits of penetration testing using Metasploit
Penetration testing an unknown network
Using databases in Metasploit
Modeling threats
Vulnerability analysis of VSFTPD 2.3.4 backdoor
Vulnerability analysis of PHP-CGI query string parameter vulnerability
Vulnerability analysis of HFS 2.3
Maintaining access
Clearing tracks
Revising the approach
Summary
2
Reinventing Metasploit
Reinventing Metasploit
Ruby – the heart of Metasploit
Developing custom modules
Breakthrough meterpreter scripting
Working with RailGun
Summary
3
The Exploit Formulation Process
The Exploit Formulation Process
The absolute basics of exploitation
Exploiting stack-based buffer overflows with Metasploit
Exploiting SEH-based buffer overflows with Metasploit
Bypassing DEP in Metasploit modules
Other protection mechanisms
Summary
4
Porting Exploits
Porting Exploits
Importing a stack-based buffer overflow exploit
Importing web-based RCE into Metasploit
Importing TCP server/ browser-based exploits into Metasploit
Summary
5
Testing Services with Metasploit
Testing Services with Metasploit
The fundamentals of SCADA
Database exploitation
Testing VOIP services
Summary
6
Virtual Test Grounds and Staging
Virtual Test Grounds and Staging
Performing a penetration test with integrated Metasploit services
Summary
7
Client-side Exploitation
Client-side Exploitation
Exploiting browsers for fun and profit
Metasploit and Arduino - the deadly combination
File format-based exploitation
Compromising Linux clients with Metasploit
Attacking Android with Metasploit
Summary
8
Metasploit Extended
Metasploit Extended
The basics of post exploitation with Metasploit
Basic post exploitation commands
Advanced post exploitation with Metasploit
Additional post exploitation modules
Advanced extended features of Metasploit
Summary
9
Speeding up Penetration Testing
Speeding up Penetration Testing
Using pushm and popm commands
The loadpath command
Pacing up development using reload, edit and reload_all commands
Making use of resource scripts
Using AutoRunScript in Metasploit
Globalizing variables in Metasploit
Automating Social-Engineering Toolkit
Summary
10
Visualizing with Armitage
Visualizing with Armitage
The fundamentals of Armitage
Scanning networks and host management
Exploitation with Armitage
Post-exploitation with Armitage
Attacking on the client side with Armitage
Scripting Armitage
Summary
Further reading

Post-exploitation with Armitage

Armitage makes post-exploitation as easy as clicking on a button. In order to execute post-exploitation modules, right-click on the exploited host and choose Meterpreter as follows:

Choosing Meterpreter will present all the post-exploitation modules in sections. If we want to elevate privileges or gain system-level access, we will navigate to the Access sub-menu and click on the appropriate button depending upon our requirements.

The Interact submenu will provide options for getting a command prompt, another meterpreter, and so on. The Explore submenu will provide options such as Browse Files, Show Processes, Log Keystrokes, Screenshot, Webcam Shot, and Post Modules, which are used to launch other post-exploitation modules that are not present in this sub-menu. This is shown in the following screenshot:

Let's run a simple post-exploitation module by clicking on Browse Files, as shown in the following screenshot:

We can easily upload, download, and view any...

Previous Section
End of Section 5
Next Section