+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: Metasploit Helpdesk - Mr. Robot / Shoe (/showthread.php?tid=5429684)
Metasploit Helpdesk - Mr. Robot / Shoe - Mr. Robot - Oct 10, 2016
![[Image: msfu-logo1.png]](https://www.offensive-security.com/wp-content/uploads/2015/03/msfu-logo1.png){kind=logo}
Metasploit Help Desk and Information Thread
Please note, this is far from finished but needing to post right now as my computer is having issues. If you wish to contribute or ask questions, feel free and I will do my best to help you.
If you wish to help run this help desk, and you have knowledge around the 3 primary tools - feel free to help out.
We will also talk about Armitage which is a GUI interface.
What is Metasploit?
The Metasploit Project is a computer security project that provides information about security vulnerabilities and aids in penetration testing and IDS signature development.
This thread will hopefully help you with any questions you may have on Metasploit, how to use it and more.
We will also be discussing Setoolkit and The PenTesters Framework(ptf)
The basics on how to use MetaSploit:
– Execute "msfconsole"
– Identify a vulnerability and use an exploit
– Configure the exploit
– Execute the payload against the target.
So let's get started on the basics.
In a fresh install/live boot of Kali Linux, type in
Code
msfconsole![[Image: GCu1nzC.png]](https://i.imgur.com/GCu1nzC.png)
The next step is to identify different options that will help you later on when finding exploits.
You can use the following commands to find different payloads and identify which you are after. The best way to use these commands is to check the parameters needed to identify what you are after. You can use "help search" to see these and the "search payload" to find which you are after.
Code
showCode
search![[Image: qH1cICo.png]](https://i.imgur.com/qH1cICo.png)
Using help on its own provides us with some core commands
Code
msf > help
Core Commands
=============
Command Description
------- -----------
? Help menu
advanced Displays advanced options for one or more modules
back Move back from the current context
banner Display an awesome metasploit banner
cd Change the current working directory
color Toggle color
connect Communicate with a host
edit Edit the current module with $VISUAL or $EDITOR
exit Exit the console
get Gets the value of a context-specific variable
getg Gets the value of a global variable
grep Grep the output of another command
help Help menu
info Displays information about one or more modules
irb Drop into irb scripting mode
jobs Displays and manages jobs
kill Kill a job
load Load a framework plugin
loadpath Searches for and loads modules from a path
makerc Save commands entered since start to a file
options Displays global options or for one or more modules
popm Pops the latest module off the stack and makes it active
previous Sets the previously loaded module as the current module
pushm Pushes the active or list of modules onto the module stack
quit Exit the console
reload_all Reloads all modules from all defined module paths
rename_job Rename a job
resource Run the commands stored in a file
route Route traffic through a session
save Saves the active datastores
search Searches module names and descriptions
sessions Dump session listings and display information about sessions
set Sets a context-specific variable to a value
setg Sets a global variable to a value
show Displays modules of a given type, or all modules
sleep Do nothing for the specified number of seconds
spool Write console output into a file as well the screen
threads View and manipulate background threads
unload Unload a framework plugin
unset Unsets one or more context-specific variables
unsetg Unsets one or more global variables
use Selects a module by name
version Show the framework and console library version numbers
Database Backend Commands
=========================
Command Description
------- -----------
creds List all credentials in the database
db_connect Connect to an existing database
db_disconnect Disconnect from the current database instance
db_export Export a file containing the contents of the database
db_import Import a scan result file (filetype will be auto-detected)
db_nmap Executes nmap and records the output automatically
db_rebuild_cache Rebuilds the database-stored module cache
db_status Show the current database status
hosts List all hosts in the database
loot List all loot in the database
notes List all notes in the database
services List all services in the database
vulns List all vulnerabilities in the database
workspace Switch between database workspacesSo we are going to search for an exploit for android, but we are going to search for .apk. In msfconsole, we type the following.
Code
search .apk![[Image: 9p4qw6H.png]](https://i.imgur.com/9p4qw6H.png)
We would then choose our exploit from the list, and run
Code
use exploit/path/to/exploitOnce we have selected our exploit, we need to choose which payload to use. We can type in
Code
show payloadsNow we need to configure it so we get the connection on our end. To do that, we need to enter
Code
show optionsAnd for each option that displays, we use the set "optionname" "settings"
For example.
Code
Set LHOST 192.168.1.54Where LHOST is the localhost on your LAN network(ipv4) you can type ifconfig into another terminal to identify your inet_address.
* - Տnow - Oct 10, 2016
High quality post, loving the explanations keep it up :D
* - M5DD - Oct 10, 2016
HQ post from hq user, excellent
* - Solvaxus-Kun - Oct 10, 2016
It's only half finished! Where's the rest?!
* - THC - Oct 10, 2016
Great thread so far, looking forward to updates. Glad to see you collaborating with Shoe, my personal bae <3