Hands-On Red Team Tactics
上QQ阅读APP看书,第一时间看更新

Foreplay - Metasploit Basics

Metasploit is the first tool that comes to mind whenever we think about pentesting or exploitation. The Metasploit framework is a sub-project of the Metasploit project. This helps us by providing information about vulnerabilities, as well as helping us with penetration testing.

Metasploit first came out in 2003. It was developed by H.D. Moore but was later ported to Ruby by 2007. By October 2009, Rapid 7 acquired the Metasploit project. After this, Rapid 7 added Metasploit Express and Metasploit Pro, commercial versions of the product, and then the evolution of the Metasploit framework began.

The Metasploit framework is still an open source framework that allows us to write, test, and execute exploit code. It can also be considered a collection of tools for pentesting and exploitation.

In this chapter, we will cover the basics of installing and using the Metasploit framework along with Armitage.

In this chapter, we will cover the following topics:

  • A quick tour of Metasploit
  • Running Metasploit
  • Armitage and team server
  • Armitage with slack
  • Armitage and Cortana scripts