In this lecture I will give a brief introduction about the sprite so the meter sprite framework is an
open source tool for the will wing and executing exploit code against a remote target machine it is
a project of the meta exploit project which is a computer security project that provides information
about security vulnerabilities and IEDs in penetration testing and ideas signature development.
In 2009 the framework was acquired by a company called Rabbit 7 exploit framework is designed to be
modular so new modules can be created and integrated into the framework
when working with me to exploit you identify systems and services using scanners which are auxiliary
modules.
Then you have to take advantage of a reliability and allows the execution of the payload using exploit
modules.
Examples of these is triggering buffer overflows or bypassing authentication after that to have to deliver
the software called load to the target system to provide access or to take control of it.
Examples of that are starting emitter our or executing some shade comments after successful exploitation
and remote connection.
You can run most modules to set up killer guards or download files for example and you can buy what
from the exploit it system to other systems.
We have also encoder modules which are programs for performing encryption.
And finally there are not modules which simply does nothing and are useful for filling the void in executable
is hard for the comments.
We have a search comment that will help you to find the module you need then we have the use command
to select that module.
We also have the info comment to get all the information about the selected module including its options
and their current settings.
You can view these options also using the four options comment and you can configure or change the settings
of these options using these at comment.
The most important option to set is the r hosts option that is used to specify the target system.
We had many other options also depending on the module used.
Examples include ports threats.
Username Password user file password file database queue.
And so on and finally you execute the actions of the module using the run or exploit comments and exploit
framework has tools with gooey such as Armitage and community.
So in this lecture I have given a brief introduction about meta Sprite and about how to work with it
and in the next lecture you will see that in practice.