Mastering Metasploit Framework - United Kingdom

Mastering Metasploit Framework Course Outline

The following course content has been built to help you build a strong foundation in penetration testing.

Introduction to Metasploit Framework

• Define the Metasploit Framework
• Metasploit Implementation
• Metasploit Pro Components
• Basic Concepts and Terms
• Metasploit Pro Workflow
• Access Metasploit Pro from the Web Interface

Using Metasploit Web Interface

• Supported Browsers
• Navigational Menus and Features
• Touring the Projects Page

Getting Started with Metasploit Framework

• Creating a Project
• Getting Target Data
• View and Manage Host Data
• Running a Vulnerability Scan
• Exploiting Known Vulnerabilities
• Post-Exploitation and Collecting Evidence
• Cleaning Up Sessions
• Generating a Report

Setting Up a Vulnerable Target

• Downloading and Setting Up Metasploit
• Services
• Weak Passwords
• Vulnerable Web Services

Managing Projects

• Create and Manage Projects
• Export Project Data
• Adding Users to Project
• Removing Users from Project
• Assigning Project to User
• Host Comments

Managing and Updating Metasploit

• Managing User Accounts
• Managing License Keys
• Verifying Downloads
• Verifying Downloads with SHA-1 Hashes
• Accessing Logs
• Backing Up and Restoring Metasploit Data
• Notification Center
• Updating Metasploit
• Restarting Metasploit Services

Managing Hosts

• Host Management Interfaces
• Adding and Deleting Hosts
• Viewing and Editing Host Metadata
• Add, Edit, and Delete Service
• Add, Edit, and Delete Vulnerabilities
• View and Access File Shares

Exploring Vulnerabilities

• Discovery Scan
• Vulnerability Scanning with Nexpose
• Importing Data
• Validating a Vulnerability
• Working with the Vulnerability Validation Wizard
• Validating Vulnerabilities Discovered by Nexpose
• Sharing Validation Results with Nexpose
• Tracking Real-Time Statistics and Events

Exploitation

• Using Exploits
• Skipping Fragile Devices

Working with Payloads

• Single and Staged Payloads
• Viewing Payloads
• Manually Selecting a Payload
• Auto Selecting a Payload
• Payload Generator

Introduction to Credentials

• Understanding Credentials
• Managing Credentials
• Reusing Credentials
• Searching Credentials
• Bruteforce Attacks

Overview of Metamodules

• Credentials Domino MetaModule
• Single Credential Testing MetaModule
• SSH Key Testing MetaModule
• Known Credentials Intrusion MetaModule
• Segmentation and Firewall Testing MetaModule

Social Engineering

• Define Social Engineering
• Managing Campaigns and Target Lists
• Upload Custom SSL Certificates
• Modify SSL Cipher for Web Servers
• Best Practices for Social Engineering

Automating Tasks

• Working with Task Chains
• Manage and Edit Task Chains
• Scheduling Task Chains
• Resource Scripts

Introduction to Reporting

• Audit Reports
• Credentials Report
• FISMA and PCI Compliance Report
• Social Engineering Campaign Details Report
• Customising Standard Reports
• Custom Templates
• MetaModule Reports

Metasploit Framework

• Accessing MSFconsole
• Managing Database and Workspaces
• Modules
• Run Metasploit Remotely
• Tag Hosts in msfconsole

Working with Pro Console

• About Pro Console
• Auto-Exploitation
• Export and Import Data
• Manage Credentials
• Manage Database from Pro Console
• Managing Notes, Tasks, and Vulnerabilities
• Manual Exploitation
• Managing Metasploit
• Pro Console Reports
• Scanning and Managing Hosts