Metasploit

DRAFT

This page is still a draft. Thank you for your understanding.

This article is also available in one or more other languages

To view this article in French, click here

What is Metasploit?

Metasploit is an open-source pentesting framework utilized by security engineers around the world. Maintained by Rapid 7, Metasploit is a collection of not only thoroughly tested exploits but also auxiliary and post-exploitation tools.

Installation and first steps

Install

$ curl https://raw.githubusercontent.com/rapid7/metasploit-omnibus/master/config/templates/metasploit-framework-wrappers/msfupdate.erb > msfinstall && \
 chmod 755 msfinstall && \
 ./msfinstall

Initialize the database

To initialize the database:

$ msfdb init

After Metasploit has started, check that we've connected to the database:

$ msfconsole
msf5 > db_status 
[*] Connected to msf. Connection type: postgresql.