Perform Penetration Tests with Metasploit

Provides a comprehensive guide to the Metasploit Framework for penetration testing, from initial exploitation through post-exploitation - vulnerability exploitation, payload generation, auxiliary scanning, and maintaining access to compromised systems during authorized security assessments. It is explicitly scoped to educational purposes or authorized security assessments only, requiring explicit written permission from the system owner before use.

Use only with written authorization for the specific target, network access to it, and a clear understanding of scope and rules of engagement - the guide itself instructs confirming the exact target host, scope, and authorization state before running any exploit module. Requires Metasploit already installed (Kali Linux ships with it) via the platform's own package manager, not an unpinned remote installer.

Deliverables: exploitation evidence (screenshots and logs), session logs (command history and extracted data), a vulnerability map with CVE references, and post-exploitation artifacts (credentials, files, system info).

Ten-phase workflow: MSFConsole basics (help, search, use, info, show options, set, exploit/run); module types - exploit modules (target-specific vulnerabilities), payload modules (post-exploitation code), auxiliary modules (scanning/enumeration), post-exploitation modules, encoders (payload obfuscation), nops, and evasion modules; searching by name, CVE, platform, type, or rank; configuring exploits (selecting a module, setting RHOSTS/RPORT/LHOST/LPORT, choosing a compatible payload, running check before exploit); payload types (singles vs. stagers/stages, with the platform/architecture/payload_type/connection_type naming convention); Meterpreter sessions (system info via sysinfo/getuid, file operations, process management including migrate, privilege escalation via getsystem, credential harvesting via hashdump, screenshots and keylogging, dropping to a shell, and backgrounding sessions); auxiliary modules for reconnaissance (SMB/SSH/FTP version scanners, port scanning, brute-force login modules); post-exploitation modules for credential gathering, system enumeration, privilege escalation, persistence, and pivoting; payload generation with msfvenom across formats (exe, elf, php, psh, asp, war, apk) including AV-evading encoded payloads; and setting up handlers (exploit/multi/handler configured to catch an incoming reverse connection, run as a background job).

Quick-reference tables cover essential msfconsole commands, essential Meterpreter commands, and common exploit modules for Windows, Linux, and web applications (e.g. ms17_010_eternalblue, tomcat_mgr_upload, jenkins_script_console).

Legal requirements are explicit: only test systems owned or explicitly authorized, document all activity, follow rules of engagement, and report findings to the appropriate parties. Technical limitations noted: modern AV/EDR may detect Metasploit payloads, not all exploits work on all target versions, and firewalls may block reverse connections. Operational security guidance: prefer encrypted channels (reverse_https), clean up artifacts after testing, and limit post-exploitation strictly to the agreed scope.

Troubleshooting covers database connection issues (msfdb init), failed exploits with no session (verify with check, confirm payload architecture, check firewalls), sessions dying immediately (migrate to a stable process, use stageless payloads), and AV-detected payloads (encoding, evasion modules, custom templates).

Built entirely around the Metasploit Framework's own components: msfconsole, msfvenom, Meterpreter, and its exploit/payload/auxiliary/post/encoder/nop/evasion module categories.

Authorized penetration testers and security researchers running a Metasploit-based assessment - from exploit selection and configuration through Meterpreter post-exploitation, payload generation, and handler setup - who need the exact command sequences and module references rather than piecing them together from scattered documentation.