Mastering Metasploit Framework - United Kingdom

Mastering Metasploit Framework Course Outline

Module 1: Introduction to Metasploit Framework

• Metasploit Framework
• Implementation
• Pro Components
• Basic Concepts
• Pro Workflow

Module 2: Using Metasploit Web Interface

• Supported Browsers
• Navigational Menus and Features
• Touring the Projects Page

Module 3: Getting Started with Metasploit Framework

• Creating a Project
• Getting Target Data
• View and Manage Host Data
• Exploiting Known Vulnerabilities
• Post-Exploitation and Collecting Evidence
• Cleaning Up Sessions
• Generating a Report

Module 4: Setting Up a Vulnerable Target

• Downloading and Setting Up Metasploitable
• Services
• Weak Passwords
• Vulnerable Web Services

Module 5: Managing Projects

• Export Project Data
• Adding Users to Project
• Removing Users from a Project
• Assigning Project to User
• Host Comments

Module 6: Managing and Updating Metasploit

• Managing User Accounts
• Managing License Keys
• Verifying Downloads with SHA-1 Hashes
• Accessing Logs
• Backing Up and Restoring Metasploit Data
• Notification Center
• Updating Metasploit
• Restarting Metasploit Services

Module 7: Managing Hosts

• Host Management Interfaces
• Adding and Deleting Hosts
• Viewing and Editing Host Metadata
• Add, Edit, and Delete Service
• Add, Edit, and Delete Vulnerabilities

Module 8: Exploring Vulnerabilities

• Discovery Scan
• Vulnerability Scanning with Nexpose
• Importing Data
• Validating a Vulnerability
• Working with the Vulnerability Validation Wizard
• Validating Vulnerabilities Discovered by Nexpose
• Sharing Validation Results with Nexpose

Module 9: Working with Payloads

• Single and Staged Payloads
• Viewing Payloads
• Manually Selecting a Payload
• Auto Selecting a Payload
• Payload Generator

Module 10: Introduction to Credentials

• Understanding Credentials
• Managing
• Reusing
• Searching
• Bruteforce Attacks

Module 11: Overview of Metamodules

• Credentials Domino MetaModule
• Single Credential Testing MetaModule
• SSH Key Testing MetaModule
• Known Credentials Intrusion MetaModule
• Segmentation and Firewall Testing MetaModule

Module 12: Social Engineering

• Introduction to Social Engineering
• Managing Campaigns

Module 13: Automating Tasks

• Working with Task Chains
• Adding a Task to a Task Chain
• Manage and Edit Task Chains
• Scheduling Task Chains

Module 14: Introduction to Reporting

• Audit Reports
• Credentials Report
• FISMA and PCI Compliance Report
• Social Engineering Campaign Details Report
• Custom Templates
• MetaModule Reports

Module 15: Metasploit Framework

• Accessing MSFconsole
• Managing Database and Workspaces
• Modules
• Run Metasploit Remotely
• Tag Hosts in MFSconsole    

Module 16: Working with Pro Console

• About Pro Console
• Auto-Exploitation
• Manage Credentials
• Managing Notes, Tasks, and Vulnerabilities
• Scanning and Managing Hosts
• Pro Console Reports 

Who should attend this Mastering Metasploit Framework Course?

The Metasploit Course teaches professionals how to harness the power of Metasploit to discover, exploit, and validate vulnerabilities. This course is beneficial for various professionals, including:

• Penetration Testers
• Ethical Hackers
• Security Engineers
• Network Administrators
• Security Consultants
• Cybersecurity Researchers
• Red Team Members
• Blue Team Members (Defensive Security)

Prerequisites of the Mastering Metasploit Framework Course

There are no formal prerequisites for attending the Metasploit Course.

Mastering Metasploit Framework Course Overview

Metasploit Framework is a powerful tool for penetration testing and vulnerability exploitation. This course covers key aspects of Metasploit, including scanning, exploiting vulnerabilities, and writing custom modules, making it essential for enhancing security testing capabilities. Mastery of the Metasploit Framework is crucial for identifying system weaknesses and improving an organisation's overall security posture.

This course is particularly beneficial for Ethical Hackers, Penetration Testers, Security Analysts, and IT Professionals responsible for safeguarding systems from cyber threats. Understanding how to effectively use Metasploit enables professionals to simulate real-world cyber-attacks, identify vulnerabilities, and implement the necessary defences. The course is invaluable for those looking to strengthen their offensive security skills and stay ahead of evolving cyber threats.

The Knowledge Academy’s 1-day course provides comprehensive instruction on using Metasploit for penetration testing. Delegates will learn how to scan networks, exploit vulnerabilities, and develop custom payloads. Through hands-on exercises and expert guidance, delegates will gain the practical skills needed to perform in-depth security assessments using Metasploit and protect their organisations against potential attacks.

Course Objectives

• To introduce the fundamentals of the Metasploit Framework and its applications
• To understand how to scan networks and identify vulnerabilities using Metasploit
• To learn techniques for exploiting system vulnerabilities and weaknesses
• To explore methods for writing custom Metasploit modules and payloads
• To develop skills in performing penetration tests and security assessments
• To prepare delegates for applying Metasploit to enhance their organisation's security defences

Upon course completion, delegates will have a solid understanding of the Metasploit Framework and the practical skills to conduct effective penetration tests. They will be equipped to identify system vulnerabilities, exploit weaknesses ethically, and enhance the security posture of their organisations, positioning themselves as skilled cybersecurity professionals.

What’s included in this Mastering Metasploit Framework Course?

• World-Class Training Sessions from Experienced Instructors
• Metasploit Certificate
• Digital Delegate Pack