Scribd Logo
Upload

Welcome to Scribd!

  • Shibs Creations

    Uploaded by

    AB Learning studio
    4 views7 pages
    Metasploit is a framework that allows attackers to choose from various attack vectors like operating systems and services to exploit known vulnerabilities. It contains many pre-built payloads that can generate shellcode to spawn a shell, run commands, or add privileged users. The document demonstrates how Metasploit can be used to select an exploit, payload, run the exploit against a target, and interact with the compromised host by elevating privileges, adding persistence, and capturing passwords.

    Original Description:

    Copyright

    © © All Rights Reserved

    Available Formats

    PPTX, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    Metasploit is a framework that allows attackers to choose from various attack vectors like operating systems and services to exploit known vulnerabilities. It contains many pre-built payloads that can generate shellcode to spawn a shell, run commands, or add privileged users. The document demonstrates how Metasploit can be used to select an exploit, payload, run the exploit against a target, and interact with the compromised host by elevating privileges, adding persistence, and capturing passwords.

    Copyright:

    © All Rights Reserved
    Download as PPTX, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    4 views7 pages

    Shibs Creations

    Uploaded by

    AB Learning studio
    Metasploit is a framework that allows attackers to choose from various attack vectors like operating systems and services to exploit known vulnerabilities. It contains many pre-built payloads that can generate shellcode to spawn a shell, run commands, or add privileged users. The document demonstrates how Metasploit can be used to select an exploit, payload, run the exploit against a target, and interact with the compromised host by elevating privileges, adding persistence, and capturing passwords.

    Copyright:

    © All Rights Reserved
    Download as PPTX, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    of 7

    METASPLOIT

    FrameWork
    Metasploit – Attack Vectors
    • Many from which to choose:
    – Operating systems
    • Windows, Linux, Mac, Unix, Cisco, etc.
    – Services
    • Web, database, e-mail, FTP, etc.
    • Extensible and configurable
    Metasploit - Payloads
    • Can be used to generate shellcode
    – Framework comes with many useful payloads
    • Spawn shell
    • Run command
    • Add privileged user
    – Configurable
    – Extensible
    Metasploit Demo 1
    • Example: the vulnerability that the
    MSBlaster worm exploited
    – http://www.securityfocus.com/bid/8205
    • Let’s use Metasploit to:
    – Choose the attack vector
    – Choose the payload
    – Run the exploit
    – Interact with the compromised host
    Metasploit Demo 2
    • Example: a web browser vulnerability
    • Let’s use Metasploit to:
    – Choose the attack vector
    – Choose the payload
    – Run the exploit
    – Interact with the compromised host
    • Elevate privileges
    • Setup persistence
    • Capture passwords
    Summary

    • For many known vulnerabilities attackers


    do not have to write their own exploit code
    – “Canned” exploits
    – The Metasploit Framework
    • Choose and configure an attack vector
    • Choose and configure a payload
    • Interact with host
    Title Lorem Ipsum dolor

    LOREM IPSUM LOREM IPSUM LOREM IPSUM


    DOLOR DOLOR DOLOR

    You might also like