#readwise # Using the Metasploit Framework - Introduction to Metasploit  ## Metadata - Author: [[Hack The Box]] - Full Title: Using the Metasploit Framework - Introduction to Metasploit - URL: https://academy.hackthebox.com/module/39/section/383 ## Summary The Metasploit Framework is a powerful tool for penetration testing that allows users to write and execute exploit code. It includes a suite of tools to test security vulnerabilities and automate attacks. There are two versions: the free Metasploit Framework and the paid Metasploit Pro, which offers additional features. The msfconsole is the main interface for using Metasploit, providing easy access to its capabilities. ## Highlights The `Metasploit Project` is a Ruby-based, modular penetration testing platform that enables you to write, test, and execute the exploit code. This exploit code can be custom-made by the user or taken from a database containing the latest already discovered and modularized exploits. The `Metasploit Framework` includes a suite of tools that you can use to test security vulnerabilities, enumerate networks, execute attacks, and evade detection. At its core, the `Metasploit Project` is a collection of commonly used tools that provide a complete environment for penetration testing and exploit development. ([View Highlight](https://read.readwise.io/read/01jpmvf7wvk6wn8areh6219s6c)) ^yt5kew --- The `modules` mentioned are actual exploit proof-of-concepts that have already been developed and tested in the wild and integrated within the framework to provide pentesters with ease of access to different attack vectors for different platforms and services. ^facxsi Metasploit is not a jack of all trades but a swiss army knife with just enough tools to get us through the most common unpatched vulnerabilities. Its strong suit is that it provides a plethora of available targets and versions, all a few commands away from a successful foothold. These, combined with an exploit tailor-made to those vulnerable versions and with a payload that is sent after the exploit, which will give us actual access into the system, provide us with an easy, automated way to switch between target connections during our post-exploitation ventures. ([View Highlight](https://read.readwise.io/read/01jpmvgn4vt079py7k9ybbk47k)) ^pdvp7d --- The `msfconsole` is probably the most popular interface to the `Metasploit Framework` `(MSF)`. It provides an "all-in-one" centralized console and allows you efficient access to virtually all options available in the `MSF`. `Msfconsole` may seem intimidating at first, but once you learn the syntax of the commands, you will learn to appreciate the power of utilizing this interface. The features that `msfconsole` generally brings are the following: - It is the only supported way to access most of the features within `Metasploit` - Provides a console-based interface to the `Framework` - Contains the most features and is the most stable `MSF` interface - Full readline support, tabbing, and command completion - Execution of external commands in `msfconsole` ([View Highlight](https://read.readwise.io/read/01jpmvk5j5cdnzt50gdq2ryn39)) ---