Metasploit — Exploitation Framework GuideStep-by-step Metasploit reference: msfconsole basics, exploit + payload + Meterpreter on Metasploitable 2 (your lab). Educational use only.FAQ

What is Metasploit?

Metasploit Framework is the standard exploitation platform: a library of exploits (which break in), payloads (which run after), plus scanners and post-exploitation tools — all driven from the msfconsole terminal. Professionals use it to prove that a vulnerability is really exploitable.

Is Metasploit illegal?

The framework is legal and open-source, used in audits worldwide. Using its exploits against systems you do not own or lack permission to test is illegal. Practice on Metasploitable 2, a VM built to be hacked, on your own computer.

What is the difference between exploit and payload?

The exploit is the break-in: it abuses a specific vulnerability to gain code execution. The payload is what runs next: a shell, Meterpreter, or a command. You pair them: exploit opens the door, payload walks through.

What is Meterpreter?

Meterpreter is Metasploit's advanced payload: an in-memory agent with commands for files, screenshots, network pivoting and privilege escalation — without writing files to disk. It is why defenders hunt in-memory behavior, not just files.

What does show options / set RHOSTS mean?

show options lists what an exploit needs. RHOSTS is the target address, LHOST is your address for the callback, RPORT the target port. set fills each value; check marks confirm before you type exploit or run.

What is msfvenom?

msfvenom builds standalone payload files — for example a lab binary that calls back to your listener. In real engagements it demonstrates payload delivery; in your lab it teaches why application allow-listing and email filtering matter.

How do I start a handler for a payload?

use exploit/multi/handler, set the same PAYLOAD, LHOST and LPORT your payload points to, then run. The handler waits; when the lab payload executes, the session opens.

How do I defend against Metasploit?

Patch quickly (most exploits target known CVEs), segment lab and production networks, run endpoint detection that flags in-memory agents, filter outbound connections, and keep tested offline backups.

All tools · Sitemap · Games