So one of the things I like to do.
As I like to bash scripts to automate some tasks when I use Linux or configure something.
And thankfully, my wife and I have something in common.
You can do the same thing with resource scripts.
So I using them, it's easy to automate your repetitive work and MSF.
They greatly enable you to do almost anything you can do in the MSF automatically and sequentially.
For instance, think of a scenario that you may want to import and map scan result into MSF and then
you're going to want to run a series of modules against some service.
Or you may routinely run a specific exploit and payload combination against a target so you can build
a resource script which first import and map result and then run specific modules that you've already
defined.
It's pretty crazy, isn't it?
So it gives you the ability to greatly automate all of your repetitive tasks and it reduces your testing
and development times.
So besides running only MSF console commands, you can also directly embed Ruby to do some things like
call API, interact with objects in the database and iterate actions.
You can use them both ways from MSF console and the web interface for Meadow's Boyd Crow and community.
And many thanks to the massive contributors.
Because you can find some of the prepared resource script under Métis Boite Framework, Script, Resource,
these are available prepared script and you can use them with abandon gladly and proudly.
Now, each resource script is designed to perform specific tasks as well as achieve specific goals,
however, you might need to modify the script to run them successfully in your environment.
Now, more over these scripts have descriptions and tell you exactly what parameters they need.
You can always open them and edit them with your preferred text editor in order to make some suitable
changes to facilitate your hacking process.
So I'm going to show you how to use some of the prepared ones as well as create your own.
So open up your terminal and start MSF console.
And I'll assume that you're going to use SMB MS one seven zero one zero as your auxiliary module.
And you will first use auxillary scanner, SMB, SMB, Ms.
One seven zero one zero.
Then set our host to ten point ten, Dr. Judy ten.
And set our report for four or five and then run the module.
Model execution is completed, so now you can save what you've done to a file so that you can use it
later, that a split allows you to say that any point with the make RC command.
So let's type make Arcy and specify a path.
Going to open up a new tab to show you the record commands.
To Reback.
So I've already created a resource file to use eternal blup.
So let's use this file from Métis boy.
To use a resource file for Métis Point, you can use the resource command.
So resource and then the name of the file.
As you can see here, the module execution is successfully completed.
And there's also another option with resource files, as I think I mentioned earlier, and now I'm going
to close the session and exit the MSF console with the command exit WI.
So on your terminal type MSF console help?
And in the help screen, there is a R parameter.
This parameter helps you specify a resource file while you are starting the MSF console.
So go ahead and type mSv, console Dash R and the name of the resource file for the eternal blup export.
So first, the MSF council will start and then it will use the commands in the resource file.
And sure enough.
They command executed, execute it successfully again.
The victim, Andrew.
Now, I don't know if you remember what I said before, but you can also use Métis Boit prepared resource
files.
And where are these files?
They will be residing in the user share Métis Boite framework script resource directory, and I think
you might find them useful.
So let me just show you one real quickly.
So let's go to the scripts directory.
Open auto pass, the hash file.
And as you see, Ruby is used in the file.
And it defines payload variables and so on.
OK, so you've got some more information on how to use a resource files.
These are really handy for any expert in penetration testing, which will be you after this course.