In previous lecture, we successfully installed at all other than the installed Metasploit Framework,
so.
With that, actually.
Next, we need to initialize the Metasploit database using the MSF, the B in it, come here.
Uh, so enter MSF db in it MSF db here in it.
And as you can see, value in it, just ask us here, what do you like to interview observers?
Yes, we have data service credential in immersive console.
Um, here.
Starting database, creating one.
Actually now.
Actually, let's run it again.
Yes, there was a TV in it.
Is the point here?
This as a user and then.
Himself to be in it.
Yes.
The existing data in the U.S. is there is a confusion in insurers have observers account user name.
Um, MSF is.
We've known for random password account password emissive also.
Now it is attempting to start a massive service here.
Um, as you can see, this is our account here.
Um, as you can see, if you needed to manually reconnect, uh, to the data that was in, it was a,
uh, console using, uh, this come on to you.
So now actually, we will prompt you to set up a web service username and password during installation
so that we can use Metasploit API.
So copy this link.
Actually, just open like that, right click or Poland clear and advanced if you if you get something
like that in, uh, Firefox potential security risks ahead.
This is just in your side.
There's nothing risky here.
Uh, click on Accept the risk and continue with an AP account.
You are not currently logged in.
Please click here to take on the log in page.
So if we have to log in firstly, as you remember, our my username is emissive and password is also
atmosphere.
Uh, save password here, as you can see here with the Split API account, so.
And here we can choose, uh, any desired username and password.
So, uh, one successfully initializing database here, uh, you will be prompted to the uh, actually
these screenshots here emissive.
With documentation, as you can see here.
As you can see here, we can see all of our databases here.
And this means we we had successfully.
Created our database, and we have pallets here and like that.
So now we can, uh, run our massive, um, massive console here using a massive console here and here.
Uh, welcome to my uh, please answer a few questions here.
Despite what Rachel said, sort complete, as you can see here with this framework, initial setup complete.
So we have successfully installed Metasploit.
No, actually, let's focus on some of the basic fundamentals before moving on the, um, actual testing.
So the fundamentals of Metasploit know that we have recovered the essential pieces of penetration test
and initialized Metasploit.
Well, let's talk about the big picture that is Metasploit Metasploit in a security project that provides
exploits and tons of reconnaissance features to aid in a penetration tester.
Metasploit was created by Steve Moore back in 2003, and since then its rapid development has led it
to be recognized as one of the most popular penetration testing tools available.
Metasploit was a natively rabid right wing project, but with its latest releases, it has this started
to support Python and core modules as well.
It is good, offers various exploits, post exploits and axillary scanner evasion, and exploit development
tools.
With the release of Metasploit five, a number of new capabilities have been added to Metasploit, some
of which are a choice between database and the new HTTP based data servers.
And in the reference We have evolution models, we have the automation API.
Exploitation at a scale or interest has not changed to a horse so we can reach across and exploit model
to be run over multiple targets.
We have shared sessions now have a background command and uh, in the latest version of Metasploit,
we have support support for goal language and Python language along with the Rabbit.
So.
The Metasploit version comes with two editions, so I want to show you here.
Metasploit editions.
Here.
Um, actually, that's not quite.
So actually, Metasploit here comes with pro and framework.
So what uh, this, uh, is this vision is a commercial one and um offers tons of great features, of
course, such as application scanning, exploitation and automated exploitation, and is quite suitable
for precision professional penetration testers and I.T. security teams.
The print is primarily used for professional, advanced and extensive titration tests and enterprise
security programs.
And we have them free versions as well.
Along with Pro, this is the framework version of Metasploit.
So, um, this is the Mississippi framework is that this is a common line here edition with all the
manual tests provided, such as a manual exploitation, third party import and so on.
So this version is suitable for the developers and the researchers, uh, as it is free and open source.
So, uh, so that this course we will be using the Metasploit Framework edition.
So this is the uh yeah, this is the pre Metasploit.
So uh, but Metasploit also forced, uh, the various types of interfaces, uh, like the graphical
user interface.
So the graphical user interface Metasploit has all the options you will ever need available at the click
of a button.
So this is a user friendly interface that helps the provider clean vulnerability management.
The user interface is offered as, uh, part of the Metasploit Pro only, and we have the console interface.
So this is the preferred interface and the most popular one as well.
Uh, so this interface provides an all in one approach to all options offered by Metasploit.
So this interface is also considered one of the most stable interfaces.
Through this course, we will be using the console interface the most and we have, uh, the normali
interface as well, that the command line interface is, uh, the most powerful interface.
So it supports launching exploits for activities such as parallel generation.
So however, I remember in every month while using the common my interface is a difficult job.
Um, now that we have, uh, set up Metasploit five, we know we are ready to perform our first penetration
test.
However, before we start the test, let's recall some of the social functions and terminologies used
in Metasploit.
So here, let's uh, I want to open notepad here, actually, and not text insertion here.
Actually.
OK, let's start with.
Who sexually?
References editor.
Content calls, and here it is.
Have tools here, shows.
Insurrection, whatever it is, we want and call us system and 18.
So now, uh, now I will, uh, what I hear some tape emerges of Metasploit, some a Metasploit.
Um, we can.
The list, all the useful comments available by comments available by typing help.
Yes, as you can see here, uh, this uh, we will have this help command will help help us very closely
and.
Here so but I want to talk about a few terminologies in Metasploit here.
So after the we have a basic terms used in the Metasploit, so, uh, I want.
Um, talk about the most mandatory ones here.
So the first is exploits should let's make it full screen here exploits.
So what these exploits is, so this is a piece of code that, uh, that when executed, will exploit
exploit the vulnerability of the target.
And we have, I think, here, uh, for better understanding.
Uh, so and we have a payload payload here.
Page, what what payload is?
So this is a piece of code that, uh, runs on the tower.
Uh, target a target.
After successful ops.
So.
We'll explore.
Nation.
So it's, uh, defines the actions we want to perform on the target system.
Actually, that's make it a little bit easier.
And we have.
Here and we have auxiliary here.
Oh, Hillary, oh, see, we are.
So what this is.
But these are modules that provide provide additional functionalities, such as scanning.
Rising.
Sniffing.
And much more.
And actually.
Here so and we have encoders here and callers and callers.
What in colors is encoders encoders are used to obfuscate models.
To avoid detection by a, uh, protection mechanism, uh, such as an antivirus, anti virus or firewall.
And we have MetaTrader as well.
So what metadata is?
I will write here.
Motor protests.
So the Metropolitan.
Is Metropolitan is a payload.
That uses in many movie deal injection staggers.
It provides.
Pro.
Provides a variety.
Of functions we can perform.
Uh, per form.
On the Harriet.
Which makes it a popular choice movie to make, which makes it a popular.
Choice.
So.
Actually, by writing help in massive concevoir running, it was a con. Um, you can list all of these
terminals, you see.
But this is the most important emerges in Metasploit here.
So here, as you can see, I've seen what the what is that?
So as you can see here?
Uh, we can.
An expert tells us how to run these, uh, we have developed a procurements here, credential backed
Commons database making comments here.
As you can see here, every Commons has description and job commons module for months.
And like that here.
So what's what is the benefits of penetration testing using Metasploit?
So, um.
Actually.
Let's make it in, let's tell it.
I mean, next election, because it's almost 60 Minutes.
So I'm waiting you in the next lecture.
Thank you for reaching.