Scribd Logo
Upload

Welcome to Scribd!

  • 201 views

    Metasploit and Armitage

    Uploaded by

    Akrem Zitouni
    Metasploit is an open-source penetration testing framework created in 2003 that contains a large database of exploits and payloads. Armitage is a graphical user interface for Metasploit that provides an easy way to scan targets, select exploits, set parameters, execute attacks, and perform post-exploitation tasks. The document demonstrates how to start the Postgresql database, initialize the Metasploit database, launch Armitage, and use Metasploit and Armitage to attack a vulnerable Metasploitable 2.0 virtual machine for testing purposes. Tutorials and documentation links are also provided.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd

    Metasploit and Armitage

    Uploaded by

    Akrem Zitouni
    201 views7 pages
    Metasploit is an open-source penetration testing framework created in 2003 that contains a large database of exploits and payloads. Armitage is a graphical user interface for Metasploit that provides an easy way to scan targets, select exploits, set parameters, execute attacks, and perform post-exploitation tasks. The document demonstrates how to start the Postgresql database, initialize the Metasploit database, launch Armitage, and use Metasploit and Armitage to attack a vulnerable Metasploitable 2.0 virtual machine for testing purposes. Tutorials and documentation links are also provided.

    Original Description:

    Metasploit_and_Armitage

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Metasploit is an open-source penetration testing framework created in 2003 that contains a large database of exploits and payloads. Armitage is a graphical user interface for Metasploit that provides an easy way to scan targets, select exploits, set parameters, execute attacks, and perform post-exploitation tasks. The document demonstrates how to start the Postgresql database, initialize the Metasploit database, launch Armitage, and use Metasploit and Armitage to attack a vulnerable Metasploitable 2.0 virtual machine for testing purposes. Tutorials and documentation links are also provided.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    201 views7 pages

    Metasploit and Armitage

    Uploaded by

    Akrem Zitouni
    Metasploit is an open-source penetration testing framework created in 2003 that contains a large database of exploits and payloads. Armitage is a graphical user interface for Metasploit that provides an easy way to scan targets, select exploits, set parameters, execute attacks, and perform post-exploitation tasks. The document demonstrates how to start the Postgresql database, initialize the Metasploit database, launch Armitage, and use Metasploit and Armitage to attack a vulnerable Metasploitable 2.0 virtual machine for testing purposes. Tutorials and documentation links are also provided.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    of 7

    Metasploit and Armitage

    Szabó Attila
    Metasploit Framework
    ● History (created in 2003, acquired by Rapid7 in 2009
    ● https://en.wikipedia.org/wiki/Metasploit_Project
    ● Big database of exploits and payloads
    ○ more than 1200 exploits
    ● Free, open-source
    ○ there are more editions: pro, expres, etc.
    ○ http://www.rapid7.com/products/metasploit/editions.jsp
    ● Console mode
    Easy hacking
    ● More than a database
    ○ infrastructure, customizable for your needs
    ● Manual usage
    ○ Scan targets and check for vulnerabilities
    ○ Choose exploit
    ○ Setup parameters and payload
    ○ Execute
    ○ Enjoy
    Armitage
    ● Great GUI for MSF
    ○ front-end but also scriptable
    ● Integrated in Kali
    ● Built-in scanning
    ○ nmap, OS detection
    ○ port scan
    ● Automatically recommended attacks
    ● Post Exploitation
    Starting up MSF in Kali 2.0
    ● Start the Postgresql Database

    service postgresql start

    ● Initialize the Metasploit Framework Database

    msfdb init

    ● Start Armitage

    armitage
    Demo
    ● Metasploitable 2.0
    ○ http://sourceforge.net/projects/metasploitable/files/Metasploitable2
    ● “Metasploitable is an intentionally vulnerable Linux virtual machine.
    This VM can be used to conduct security training, test security tools,
    and practice common penetration testing techniques. “

    Never expose this VM to an untrusted network (use NAT or Host-only


    mode)
    Tutorials and links
    https://www.ethicalhacker.net/features/special-events/free-armitage-and-
    metasploit-video-training

    http://blog.cobaltstrike.com/2013/02/06/getting-started-with-armitage-and-the-
    metasploit-framework-2013/

    https://www.offensive-security.com/metasploit-unleashed/

    https://www.exploit-db.com/docs/17910.pdf

    You might also like