The Complete Metasploit Guide

Testing Services with Metasploit

Now let's talk about testing various specialized services. It is likely during your career as a penetration tester that you will come across a testable environment that only requires testing to be performed within a service such as databases, VOIP, or SCADA. In this chapter, we will look at various developing strategies to use while carrying out penetration tests on these services. In this chapter, we will cover the following points:

• Understanding SCADA exploitation
• The fundamentals of ICS and their critical nature
• Carrying out database penetration tests
• Testing VOIP services

Service-based penetration testing requires sharp skills and a good understanding of services that we can successfully exploit. Therefore, ...