Before we jump into an example, penetration test, we must know why we showed proof where Metasploit
to manual exploitation techniques.
Is it because of the hacker?
Will that use as a professional or look?
Or is there a different reason when exploit is a preferable choice compared to traditional manual tech
news because of specific factors?
We will discuss this in this lecture.
So first of all, Metasploit is your open source.
One of the top reasons why we should go with Metasploit Framework is because it is open source and actively
developed with various other expensive tools exist for carrying out penetration testing.
However, Metasploit it uses actually its source code and add their own custom modules.
The provisions of Metasploit is chargeable.
But for the sake of learning, the framework edition is mostly preferred.
Support for testing large networks and natural naming conventions using Metasploit is easier.
So now over here.
Ease of use refers to a natural naming conventions for the comments here.
So.
Metasploit offers excellent comfort while conducing a massive network intrusion test.
Consider a scenario where we need to test the network with 200 system instead of checking each system
one after the other.
Metasploit allows us to examine the entire range automatically using parameters such as subnet and classless
internet domain routing.
See IDR values Metasploit tests all the systems to exploit the vulnerability, whereas using manual
techniques he might need to launch exploit manual onto 200 systems.
Data for Metasploit saves a significant amount of time and energy, also Metasploit as smart payload,
payload generation and submission mechanism.
Most importantly, switching between payloads in Metasploit is easy.
I'm sorry Metasploit provides quick access to change pilots using the, uh, here, said payload command.
My comment, so therefore turning the matter operator or shale based excess into a more specific operation,
such as adding a user and getting remote desktop desktop access becomes easy.
Generating sheriff to use in the manual exploits also becomes easier by using the massive amount of
venom application from the command line, which also features encryption in Metasploit.
Five point zero release here.
As you can see here, you can create programs with NSF Momentum Excellence Awards as well.
Clean, it exists, so this is the one of the features of Metasploit, Metasploit is also responsible
for making a much cleaner exit from the system.
It has compromised a custom coded exploit, on the other hand, can crush the system while exiting exit,
exiting its operations, making a clean exit.
Indeed, an essential factor in cases where we know that the service will not restart immediately.
Let's consider a scenario where we have compromised the web.
And while we were making an exit, the exploit application crashed.
The scrutiny of the maintenance time for the server is left with 50 days time on it.
So what do we do?
Shall we wait for the next 50 or the days for the servers to come up again so that we can exploit it
again?
Moreover, what if the servers come back after being patched?
People don't end up kicking ourselves?
This is also a clear sign of poor penetration testing skills that offer a better approach, albeit to
the use of use.
The Metasploit Framework, which is known for making much cleaner exist, as well as offering tools
of post exploitation functions such as persistence, which can help maintain a permanent access to the
server.
So actually, we have reached into the domain controller case study here, so already the basics of
Metasploit, we are all set to perform our penetration tests with Metasploit.
So let's consider an on site scenario where we are asked to test an IP address and check if it is vulnerable
to an attack.
The sole purpose of this test is to ensure all the proper checks are in place, so this scenario is
quite straightforward.
We will presume that all the prior interactions have been carried out with the client and that the actual
testing phase is going to start.
Please refer to the questions here if you have a question site here, if you have any questions here.
So now I want you to using the database in Metasploit DBS status here.
So it's always better push to restore the results automatically when you're conducting penetration test.
You're making use of the databases will help us build the knowledge base of horse services and vulnerabilities
in the scope of penetration tests.
Using databases and Metasploit also speeds up searching and improvise response time.
Uh, so Metasploit 6.0 relies easily on data services such as post curious squirrel database and web
servers in the installation phase.
We learned how to initialize the database and web service for Metasploit to check if MetaStable is currently
connected to a database or a web service.
We can actually, of course, that's our Metasploit yet.
And so to check if my display is currently connected to a database or web servers, we can just type,
uh, actually DB status.
So as you can see here, connected to remote data service to localhost connection type, it's hushed
http connection name is local ETPs data servers.
So let's open this link.
And as you can see here, we have yet comment, David.
So you can save.
So there might be situations where we want to connect to a separate database or a web service, rather
than the default Metasploit database.
In such cases, we can make use of the DB Connect here.
Uh, DB connect or spot the what is it?
Because it gets sent.
So in such, uh, such situations, we can use DB Connect and help.
Unchecked and help, as you can see here we can.
There is a possible connection comments here.
This is the examples and this is the example it.
So.
Sure, here.
Now, I want to be sure you here.
The comments on motorsport, so we can believe this, and now we will start a new home, actually new
text to show you the possible database comments here.
So in us, we have analyzed here.
So this comment?
Analyze.
Database information.
Information about a target IP or a range, and we have DV connect here.
So this command is used, is used to interact, is used to interact.
These was the ways that.
Is used to interact.
Of.
Sorry.
Is it is used to interact, interacts with databases other.
Then the, uh, actually default one.
And.
The old one.
And we have another comment here, which is DB export.
So, uh, this command is used.
Is used to export the entire.
Set of data stored in the database for the sake of the sake of creating reports or as inputs to another.
No other tool.
And we have the we and up here, uh, to be in the in map.
So this comment, the actual these and be in the command command is used.
Or scanning the target with an mop and storing the results in the methods employed.
Lloyd database.
And we have DBE status, but we have used this comment in this lecture.
So you are there to know what I think.
So this comment?
Command is used to check whether.
Uh, were there database connectivity is present or not?
And we have, uh, the disconnect, uh, we have just a few to, uh, that I want to talk about here.
So to be.
Uh, deep disconnect.
So now this command is used to disconnect from a poor particular database.
And we have to import here last month that we will know that this command is used to import results
from other tools like these are such and such, such as these in math and and actually others and others
others.
So.
Now, actually, we have two or three command that I want to help you.
Actually, we have a few comments to write here to which is done database rebuild church.
So this command is used, used to rebuild the church.
If that earlier.
The church gets corrupted or is told with all the results.
And we have to be removed here, they be removed.
So this this is a simple command to this command removes.
This saved.
Data service entry.
And last, commander, we will discuss about is the what's.
They be safe.
What this command does, so this command moment saves the current data.
There is.
His entry as the default saw that on its next start up.
It reconnects who this service by default.
Tourists look like the when starting a new penetration test.
It's always good to separate previously scanned hosts and their respective data from the new penetration
test so that they don't get merged.
But we can do these images before starting a new penetration test by making use of the works of common,
uh, like that.
Here, let's change work.
Face its default workspace.
But way they do like that, uh, wall pays.
But what's?
Age, as you can see here, we can list of experts here and workspace.
We will not be we you can see here we have just one worse, worse.
Well, one, uh, works spacing in.
So to the new workspace, we can use you the workspace, uh, a comment.
Uh, so if I was by then followed by an identified so work space?
Uh, actually not.
Will say it's a.
And then after that, we will test.
SpaceX test, SpaceX, for example.
And we added workspaces here.
So when the UM exhibit is common for space, you can see here we have people than we have.
They have different workspace and we have this space workspace.
So here we can see that we have specifically the new workspace using the Um, this is a switch.
So let's switch the workspace by merely using the workspace comment.
So if it works for its name, uh, here, for example?
No.
Actually, we can also change these workspace work base after, uh, I think this comment.
Just enter your creative workspace name, for example, in my case, is this test space.
As you can see, we are now in space workspace, so we were right like that workspace.
As you can see here, we are working in a workspace this space now.
Um, and.
So we can verify them in the current workspace, using the workspace common where the workspace should
be in red here like that and have this symbol before as a prefix, meaning that the workspace is in
use here.
Let's change this to default.
Workspace default.
No, that's right, workspace again.
As you can see, we are in default work suites.