Using Exploits

From Metasploit Unleashed
Jump to: navigation, search


Contents


Selecting an exploit in Metasploit adds the 'exploit' and 'check' commands to msfconsole.

msf > use exploit/windows/smb/ms08_067_netapi
msf exploit(ms08_067_netapi) > help
...snip...
Exploit Commands
================

    Command       Description
    -------       -----------
    check         Check to see if a target is vulnerable
    exploit       Launch an exploit attempt
    rcheck        Reloads the module and checks if the target is vulnerable
    rexploit      Reloads the module and launches an exploit attempt

msf exploit(ms08_067_netapi) >

Show

Using an exploit also adds more options to the 'show' command.

Targets

msf exploit(ms03_026_dcom) > show targets

Exploit targets:

   Id  Name
   --  ----
   0   Windows NT SP3-6a/2000/XP/2003 Universal

Payloads

msf exploit(ms03_026_dcom) > show payloads

Compatible payloads
===================

   Name                                             Description
   ----                                             -----------
   generic/debug_trap                               Generic x86 Debug Trap
...snip...

Options

msf exploit(ms03_026_dcom) > show options

Module options:

   Name   Current Setting  Required  Description
   ----   ---------------  --------  -----------
   RHOST  192.168.1.120    yes       The target address
   RPORT  135              yes       The target port


Exploit target:

   Id  Name
   --  ----
   0   Windows NT SP3-6a/2000/XP/2003 Universal

Advanced

msf exploit(ms03_026_dcom) > show advanced

Module advanced options:

   Name           : CHOST
   Current Setting:
   Description    : The local client address

   Name           : CPORT
   Current Setting:
   Description    : The local client port
...snip...

Evasion

msf exploit(ms03_026_dcom) > show evasion

Module evasion options:

   Name           : DCERPC::fake_bind_multi
   Current Setting: true
   Description    : Use multi-context bind calls
...snip...



Using Exploits