Importing scan results

Alternatively, we can also use a third-party tool to perform enumeration. Then, the result from the tool can be imported into MSF. Follow these steps to import the scan result:

  1. It's always better to perform a port scan and service enumeration before performing exploitation via Metasploit. Instead of using the built-in port scanner for Metasploit, you can use Nmap separately and save the scanning result in XML format using the -oX switch:
  1. Just like the db_import command that was used in msfconsole, you can use the same feature in the Metasploit web interface by clicking on the Import button:
  1. On clicking the Import ...

Get Hands-On Web Penetration Testing with Metasploit now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.