metasploit for beginners: series with labs

index

In this first episode of the series, we explore how Metasploit is used at different stages of penetration testing in a controlled training environment, including scanning, exploitation, and post-exploitation.

Each machine in this series is done with Metasploit in mind and doesn’t deep dive into the specific vulnerabilities or attack chains.

Metasploit resources

Tip (Productivity enhancement)

You can quickly format your code by pressing Ctrl + Alt + F (Windows/Linux) or Cmd + Option + F (Mac).

Additional shortcuts include:

Action	Windows/Linux	Mac
Search	`Ctrl` + `F`	`Cmd` + `F`
Replace	`Ctrl` + `H`	`Cmd` + `H`
Save all	`Ctrl` + `Alt` + `S`	`Cmd` + `Option` + `S`

Warning (Cross-browser compatibility issues)

This API is not supported in Internet Explorer and has limited support in older browsers. Make sure to include appropriate polyfills.

1
if (!Object.fromEntries) {
2
  Object.fromEntries = function(entries) {
3
    const obj = {};
4
    for (const [key, value] of entries) {
5
      obj[key] = value;
6
    }
7
    return obj;
8
  };
9
}

See the Browser Compatibility Table for detailed information.

Highlighting the resources available

Danger (Critical data loss risk)

Running this command will permanently delete all files in your current directory. Make sure to back up important data before proceeding.

# This will delete everything in the current directory
rm -rf ./*
# Safer alternative with confirmation
rm -ri ./*

This operation cannot be undone and recovery tools may not be able to restore your data.

metasploit for beginners: series with labs

Metasploit resources

Highlighting the resources available

Hackthebox metasploit

Tryhackme metasploit

Metasploit resources