Introduction
Hello, how are you? Today we will give a little introduction to metasploit concepts for a future tutorial that I am planning to upload, well let’s proceed.
Developing
When you first encounter the Metasploit Framework (MSF), you may be overwhelmed by its many interfaces, options, utilities, variables, and modules. For now, we’ll turn to the basics that help you make sense of the big picture. We’ll go through some basic insight testing terminology and then briefly cover the various user interfaces that Metasploit has to offer. Metasploit itself is open source free software, with many contributors in the security community, but two commercial versions of Metasploit are also available.
The first time you use Metasploit, it is important that you don’t obsess over an exploit, instead focus on the Metasploit functions and what commands you used to make the exploit possible.
Terms that are generally used in metasploit tool.
Exploit
An exploit is the means by which an attacker, or pen tester for that matter, takes advantage of a flaw in a system, application, or service. An attacker uses an exploit to attack a system in a way that results in a particular desired result that the developer never intended. Common exploits are buffer overflows, web application vulnerabilities (such as SQL injection), and misconfigurations.
Payload
A payload is the code that we want the system to execute and that is going to be selected and delivered by the framework. For example, a reverse shell is a payload that creates a connection from the attacker’s target computer to a Windows command prompt, while a bind shell is a payload that “binds” a command prompt. (command prompt) to a listening port on the target machine, which the attacker can connect to. A payload could also be something as simple as a couple of commands that are executed on the target operating system.
Shell code
Shellcode is a bunch of guidelines utilized as a payload when the endeavor happens. Shellcode is ordinarily written in low level computing construct. By and large, an order shell or Meterpreter shell will be given after the series of guidelines has been performed by the objective machine, subsequently the name.
Module
An in-context module is a piece of software that can be used by the Metasploit Framework. Sometimes, you may require the use of an exploit module, a software component that carries out the attack. Other times, a helper module may be needed to perform an action such as system scanning or enumeration. These interchangeable modules are at the core of what makes the Framework so powerful.
Listening
A Listener is a component within Metasploit that waits for an incoming connection of some kind. For example, after the target computer has been exploited, it can call the attacking machine over the Internet. The listener handles that connection, waiting on the attacking machine to be contacted by the exploit system.
Metasploit interfaces
Msfconsole
Msfconsole is by a long shot the most well-known piece of the Metasploit Structure, and for good explanation. It is one of the most adaptable, highlight rich, and all around upheld apparatuses inside the structure. Msfconsole offers a convenient across the board interface for practically all choices and settings accessible in the Structure; it resembles an all in one resource for all your double-dealing dreams. You can utilize msfconsole to do everything, including sending off an endeavor, stacking partner modules, performing identification, making audience members, or running a monstrous endeavor against a whole organization.
Albeit the Metasploit System is continually changing, a subset of the orders remains generally steady. By dominating the nuts and bolts of msfconsole , you will actually want to stay aware of changes to represent the significance of learning msfconsole.