Metasploit Revealed: Secrets of the Expert Pentester

Client-side Attacks with Metasploit

In the previous chapter, we learned to use various tools such as NMAP and Nessus to directly exploit vulnerabilities in the target system. However, the techniques that we learned are useful if the attacker's system and the target system are within the same network. In this chapter, we'll see an overview of techniques used to exploit systems, which are located in different networks altogether. The topics to be covered in this chapter are as follows:

• Understanding key terminology related to client-side attacks
• Using msfvenom to generate custom payloads
• Using Social-Engineering Toolkit
• Advanced browser-based attacks using the browser_autopwn ;auxiliary module