Metasploit
Metasploit Framework is a widely used penetration testing tool for discovering and exploiting known vulnerabilities in target systems. Its main interface, msfconsole, allows users to search for exploit modules, configure attack parameters, and manage active sessions after a successful exploit.
Core & Navigation
helpDisplays the list of available commands.
bannerDisplays the Metasploit banner.
historyShows previously executed commands.
backReturns to the main console from the current module.
exitExits the console.
Module Discovery
searchSearches for modules by name or keyword.
useSelects a module to work with.
infoDisplays details, author, and requirements of the selected module.
show <type>Displays modules of a given type (e.g. show options, show payloads, show targets).
Configuration
setSets a value for a parameter (e.g. set RHOSTS 192.168.1.10).
unsetRemoves a previously set value.
checkTests whether the target is vulnerable, without launching the exploit.
Common Parameters
RHOSTSThe target system's IP address.
RPORTThe target port number.
LHOSTYour (attacker's) IP address, used for reverse connections.
LPORTThe port you're listening on for incoming connections.
PAYLOADThe payload (shell type) to be delivered.
TARGETSelects a specific target variant when the exploit offers multiple system/version options (via show targets).
Execution & Sessions
exploit / runLaunches the configured attack.
handlerStarts a payload handler (listener) as a background job.
killStops a running job.
sessionsLists active sessions.
sessions -i [id]Connects to and takes control of a specific session.
Example Usage
Below is a real-world exploitation example using Metasploit — see the full attack walkthrough here.