Metasploit is a free, downloadable framework that allows you to easily obtain, develop, and
attack computer software vulnerabilities. It comes with hundreds of professional-level vulnerability attack tools for known software vulnerabilities. When HD Moore
released Metasploit in 2003, the computer security situation was permanently changed. As if overnight,
anyone can become a hacker, and everyone can use attack tools to attack vulnerabilities that have not been patched or have just been
patched. Software vendors can no longer postpone the release of patches for published vulnerabilities because the Metasploit
team has been working hard to develop various attack tools and contribute them to all Metasploit users.
Metasploit was originally designed to be an attack tool development platform. However, in the current situation, security experts
and amateur security enthusiasts use it more as a kind of mouse click to use the attack tool included in it.
Gong attack environment.
Common module application: Collection of common modules of Metasploit
Post-penetration module application: Metasploit post-penetration command
classification
[Exploits] Use classification, mainly store some overflow exploit modules
[auxiliary] This category is an auxiliary module, mainly stores scanning blasting, etc.
[payloads] This category is a backdoor module, which mainly carries the control of the victim machine after successful exploitation of the vulnerability
[encoders 】 This classification is an encoding module, encoding malicious code can bypass anti-software
feature code killing [nops] This classification is a null character module, in the era of remote control software such as gray pigeons, anti-software is relatively backward, mostly
Sign code to match whether it is malware, feature code positioning, and blank character filling became the mainstream anti-kill methods at the time.
The msf path
/ usr / share / metasploit-framework
mainly includes data, tools, plugins, and scripts. Generally, msfupdate is used to update the attack module.
Dictionary path
/ usr / share / metasploit-framework / data / wordlists
script path
/ usr / share / metasploit-framework / scripts /
msf various module paths
/ usr / share / metasploit-framework / modules
It ’s all source code, and I wo n’t.
Examples
