Downloaded 43 times
Uploaded byLalith Sai
Metasploit
The document provides an overview of the Metasploit framework. It describes Metasploit as an open-source penetration testing software that contains exploits, payloads, and other tools to help identify vulnerabilities. Key points covered include Metasploit's architecture and modules for scanning, exploitation, and post-exploitation. Examples of tasks that can be performed include port scanning, vulnerability assessment, exploiting known issues, and gaining access to systems using payloads and meterpreter sessions. The document warns that Metasploit should only be used for legitimate security testing and cautions about the potential risks if misused.
In this document
Powered by AI
Introduction to the Metasploit Framework, a critical tool for penetration testing.
Defines key terms such as vulnerability, exploit, and payload; provides warnings for safe usage.
Overview of the Metasploit Project's history, inception by HD Moore, and acquisition by Rapid7.
Topics covered in video related to Metasploit include its usage, social engineering, and hacker types.
Introduction to the Metasploit Framework features, modules, and collaborative nature with Rapid7.
Overview of different editions and versions of Metasploit, including free and commercial editions.
Metasploit's compatibility with various operating systems, allowing easy exploitation.
Explains Metasploit architecture highlighting auxiliary, exploit, payload, and post modules.
Description of auxiliary modules, exploit types, and manual vs auto-exploitation methods.
Explores types of payloads and connection methods used in Metasploit for exploitation.
Activities after exploit execution, including information gathering and privilege escalation.
Discusses advantages like being open-source and updated, and challenges in learning and usage.
Highlights the professionals who benefit from using Metasploit, like penetration testers and auditors.
Summarizes the ease of use of Metasploit along with cautions for responsible usage.
Lists resources for further learning about Metasploit and expresses appreciation to the audience.
More Related Content
Metasploit
- 1.
- 2. Useful terminology: • Vulnerability:A weakness in the target system, through which penetration can successfully occur. • Exploit: Once a vulnerability is known, an attacker takes advantage of it, and breaks into the system using a code/script known as an exploit. EXPLOIT = VULNERABILITY + PAYLOAD • Payload: This is a set of tasks initiated by the attacker subsequent to an exploit, in order to maintain access to the compromised system • CLI: command line interface • GUI: graphical user interface • MSF: Meta Sploit Framework
- 3. WARNINGS Metasploit is verypowerful, and very dangerous I used VMWare to isolate the operating system from other systems and the internet Use of this on any unauthorized way will get you fired / arrested / deported etc...
- 4. HISTORY OF THEMETASPLOIT PROJECT • Metasploit Project –HD Moore & Friends –A community-driven project since 2003 • Rapid7 –Maker of NeXpose Vulnerability Management –Purchase the Project from HD • Metasploit Framework –The original open -source exploit framework
- 6. THIS VIDEO INVOLVES •Usage of METASPLOIT • Social engineering • Organization's server crashes from a DoS attack • Honeypots • Difference between White hat and Black hat hacker • Data breaching
- 8. METASPLOIT TOPICS Fundamentals about Metasploit Framework Usage ScanningExploitation Post Exploitation Writing Metasploit Modules
- 9. WHAT IS METASPLOIT? •Metasploit Framework, created by the Metasploit Project, is the most popular exploitation tool available for developing, testing, and performing exploits. It allows penetration testers, auditors, and vulnerability assessment personnel to create their own penetration testing systems and exploit modules. • It is A collaboration between the open source community and Rapid7 • An exploitation framework written in Ruby, currently at version 4.9.1 • It’s modular • Contains exploits, payloads, encoders and auxiliaries
- 10.
- 11. METASPLOIT VERSIONS •1.0 releasedin 2003 (Perl) •2.0 released in 2004 (Better Perl) –2.7 released in late 2006 •3.0 released in 2007 (Ruby) –3.2 released in late 2008 –3.3 released in late 2009 –3.4 released in early 2010 –3.4.1 is the most recent release •Metasploit now has 567 exploits and 283 auxiliary modules (up from 551 and 261 in v3.4)
- 12. VERSIONS AND BASICS -Metasploit Framework Edition • The free version - Metasploit Community Edition • A free, web-based user interface for Metasploit - Metasploit Express • An open-core commercial edition for security teams who need to verify vulnerabilities - Metasploit Pro • An open-core commercial Metasploit edition for penetration testers - Armitage • Is a graphical cyber attack management tool for the Metasploit Project that visualizes targets and recommends exploits.
- 13. • Runs onany operating system -Source code for Linux / Unix / MacOS X -Portable to Windows via CYGWIN • Allows anyone to exploit & usually “root” certain machines with only an IP address and a basic background of the system • Requires no knowledge of the software bug, or exploit machine cod
- 14.
- 15. WITH METASPLOIT, YOUCAN PERFORM THE FOLLOWING OPERATIONS Conduct basic penetration tests on small networks Run spot checks on the exploitability of vulnerabilities Discover the network or import data Browse exploit modules and run individual exploits on hosts.
- 16. HIERARCHY BUILDS UPLIKE THIS
- 17. • Auxiliary modules– are used for information gathering, enumeration, port scanning and that sort of thing. There are plenty of useful tools in there too for things like connecting to SQL databases and even tools for performing man-in- middle attacks. • Exploit modules – are generally used to deliver exploit code to a target system. • Post modules – offer post exploitation tools such as the ability to extract password hashes and access tokens and even modules for things like taking a screenshot, logging and downloading files. • Payload modules – are used to create malicious payloads for use with an exploit
- 19. AUXILIARY • Typically, anExploit without Payload is called Auxiliary. • Used for scanning, fuzzing, and some automated tasks. • Makes use of mixins. • To run type in Run.
- 20. ENCODERS • To evadeanti-viruses encoders are used. • Payload’s are encrypted
- 21. NOPS • Mainly usedto keep the size of the payload consistent. • Having 10 nops.
- 22. SCANNING USING METASPLOIT •Discovery Through Vulnerability Scanning Vulnerability scanning will allow you to quickly scan a target IP range looking for known vulnerabilities, giving a penetration tester a quick idea of what attacks might be worth conducting. • Port Scanning: A port scan is a series of messages sent by someone attempting to break into a computer to learn which computer network services, each associated with a “well- known” port number, the computer provides. Port scanning, a favorite approach of computer cracker, gives the assailant an idea where to probe for weaknesses.
- 23. HOW A DISCOVERYSCAN WORKS A discovery scan can be divided into four distinct phases: • Ping scan - determines if the hosts are online • Port scan - identify the ports that are open and the services are available on those ports • OS and version detection - detects the service version numbers and operating system based on how the system responds to the probes • Data import - collects all the data and creates a report and imports the data into the project
- 24. EXPLOITATION An exploit isthe use of software, data, or commands to “exploit” a weakness in a computer system or program to carry out some of malicious intent, such as a denial-of-service attack, Trojan worms or viruses. The weakness in the system can be a bug, a or simply a design vulnerability. The process is known as exploitation. The following are the five steps in the exploitation process: scanning the target selecting an exploit selecting a payload encoding the exploit launching the attack
- 25. • Scanning thetarget To scan the target, we use port scanning and vulnerability scanning techniques in which we perform scanning by using different tools like nmap, nessus and etc. • Selecting the exploit This process includes the selection of exploit. • Selecting the payload Payloads are the commands the attacker runs upon a successful completion of their exploit. • Encoding the exploit Encoding in Metasploit is how the exploit and payload are packaged together, and is often done automatically, via the set commands. Launching the attack Once all the settings have been set, the attacker simply calls an exploit.
- 26. EXPLOITING VULNERABILITIES: Metasploit offersa couple different methods you can use to perform exploitation: Auto-exploitation. Manual exploitation. Auto-Exploitation: The auto-exploitation feature cross-references open services, vulnerability references, and fingerprints to find matching exploits. The simple goal of auto-exploitation is to get a session as quickly as possible by leveraging the data that Metasploit has for the target hosts. Manual Exploitation: Manual exploitation provides a more targeted and methodical approach exploiting vulnerabilities. This method is particularly useful if there is a specific vulnerability that you want to exploit.
- 27. Payload Type: Specifiesthe type of payload that the exploit will deliver to the target. Choose one of the following payload types: • Command: A command execution payload that enables you to execute commands on the remote machine. • Meterpreter: An advanced payload that provides a command line that enables you to deliver commands and inject extensions on the fly.
- 28. Connection Type: Specifieshow you want your Metasploit instance to connect to the target. Choose one of the following connection types: • Auto: Automatically uses a bind connection when NAT is detected; otherwise, a reverse connection is used. • Bind: Uses a bind connection, which is useful when the targets are behind a firewall or a NAT gateway. • Reverse: Uses a reverse connection, which is useful if your system is unable to initiate connections to the targets.
- 29. • LHOST: Definesthe address for the local host. • LPORT: Defines the ports that you want to use for reverse connections. • RHOST: Defines the target address. • RPORT: Defines the remote port you want to attack. • Target Settings: Specifies the target operating system and version. • Exploit Timeout: Defines the timeout in minutes.
- 30. POST EXPLOITATION • Postexploitation is an important process in a penetration test as it allows the attacker to gather information from the system that he has exploited. A lot of penetration testers are using the Metasploit framework modules for system exploitation. However, Metasploit provides and modules for post exploitation activities for a variety of systems. • Margate's to another process which has admin privileges and then completes the task.
- 31. • Using thismeterpreter we can perform different tasks by getting the privileges of the victim • Can grab a screen shot’s, keylogging by loading and much more with -Espia -Incognito -Pivot -Sniffer -Priv -Stdapi (By Default)
- 32. • What elsewe can do in post exploitation? Let’s list some of them, -Keylogging -Screen shots -view live screen -access webcam -take control of keyboard and mouse -del user -pivort -vm detection and many more..
- 33. • Advantages Open source Frequentlyupdated • Disadvantages Difficult to learn Can crash your system if not used wisely Requires deep knowledge for exploit development
- 34. IT IS USEFUL FOR Future penetration testers Vulnerability assessment personnel Security Engineers Security Researchers Auditors Programmers Any IT professional who has to test regularly to maintain compliance requirements Any IT professional who runs scheduled testing of security infrastructure as a best practice
- 35. SUMMARY • Metasploit isvery easy to use, and very powerful • Web interface allows the scans to be run from any system, on any operating system • Evidence may or may not be left behind on the system • IDS/IPS will sense these exploits • Only contains old & well known exploits
- 36. NOTE • Never misuseit your personal purpose • Use it wisely • Understand the modules before using • Test it using virtual machines
- 37. REFERENCE • https://resources.infosecinstitute.com • https://www.offensive-security.com/metasploit-unleashed/ •https://www.cybrary.it/course/metasploit/
- 38.
Editor's Notes
- #2 It was designed and developed by H.D.Moore in 2003. Firstly it was written in perl then It was re-written in Ruby script
- #7 Honeypots ( computer system that is set up to act as a decoy to lure cyber attackers, and to detect, deflect or study attempts to gain unauthorized access to information systems)
- #13 Runs on any operating system
- #15 - FILESYSTEM AND LIBRARIES Metasploit Filesystem The MSF filesystem is laid out in an intuitive manner and is organized by directory. • data: editable files used by Metasploit • documentation: provides documentation for the framework • external: source code and third-party libraries • lib: the ‘meat’ of the framework code base • modules: the actual MSF modules • plugins:plugins that can be loaded at run-time • scripts:Meterpreter and other scripts • tools:various useful command-line utilities Metasploit Libraries The MSF libraries help us to run our exploits without having to write additional code for rudimentary tasks, such as HTTP requests or encoding of payloads.
- #17 It has 1500+ tested exploits, 400+ payloads and 40+ encoders. It offers “plug and play” of payloads which alone is huge advantage.
- #20 In object-oriented programming languages, a Mixin is a class that contains methods for use by other classes without having to be the parent class of those other classes.
- #23 Requires no knowledge of software bug or exploit machine code. Allows anyone to exploit and usually “root” . Certain machines with only “ip address” and a basic background system.