Metasploit Revealed: Secrets of the Expert Pentester

Vulnerability Hunting with Metasploit

In the last chapter, you learned various techniques of information gathering and enumeration. Now that we have gathered information about our target system, it's time to check whether the target system is vulnerable and if we can exploit it in reality. In this chapter, we will cover the following topics:

• Setting up the Metasploit database
• Vulnerability scanning and exploiting
• Performing NMAP and Nessus scans from within Metasploit
• Using Metasploit auxiliaries for vulnerability detection
• Auto-exploitation with db_autopwn
• Exploring Metasploit’s post-exploitation capabilities