This command is used to set specific options for exploit. Then we use the use command, and we type in the exploit name to run it. For example, we show the exploits, and we pick a certain exploit that we want to use. This command is used to use something that we have shown. We can show the available auxiliaries and the available payloads. This command shows the available exploits. Using this command, we can get information about the commands and description of how we can use them. It is used to run the Metasploit program. Here are some basic commands: msfconsole:

The commands on Metasploit are very simple. It allows us to exploit vulnerabilities or create our own exploits. It's a huge framework that contains a large number of exploits.

And using the Nmap, we can see that this program is installed, which means that we can execute commands on the target machine. Rapid7 will tell us that the 2.3.4 version of FTP has a backdoor command execution, so we can basically execute commands on the target computer if it has this program installed. Now using the Metasploit, we are going to exploit this service. Rapid7 is a company that makes the Metasploit framework, so that's why we choose this particular exploits. We can see that the first results come in from a website Rapid7.

So, we will Google the service name vsftpd 2.3.4 exploit which is followed by exploits. Again, using the same method that we have already been, we have a Nmap scan as we know we are going to go on each port and Google them, looking for exploits. Metasploit is an exploit development and execution tool.įirst, let's look at how we can find that exploit. We are choosing this exploit because we are going to look at a framework called Metasploit. In this section, we are going to look at the very simple exploit which is backdoor. Next → ← prev Server-side attacks - Metasploit basics

Cara deface dengan metasploit