Mastering Metasploit Framework in Tucson

Mastering Metasploit Framework Course Outline

Module 1: Introduction to Metasploit Framework

• Metasploit Framework
• Implementation
• Pro Components
• Basic Concepts
• Pro Workflow

Module 2: Using Metasploit Web Interface

• Supported Browsers
• Navigational Menus and Features
• Touring the Projects Page

Module 3: Getting Started with Metasploit Framework

• Creating a Project
• Getting Target Data
• View and Manage Host Data
• Exploiting Known Vulnerabilities
• Post-Exploitation and Collecting Evidence
• Cleaning Up Sessions
• Generating a Report

Module 4: Setting Up a Vulnerable Target

• Downloading and Setting Up Metasploitable
• Services
• Weak Passwords
• Vulnerable Web Services

Module 5: Managing Projects

• Export Project Data
• Adding Users to Project
• Removing Users from a Project
• Assigning Project to User
• Host Comments

Module 6: Managing and Updating Metasploit

• Managing User Accounts
• Managing License Keys
• Verifying Downloads with SHA-1 Hashes
• Accessing Logs
• Backing Up and Restoring Metasploit Data
• Notification Center
• Updating Metasploit
• Restarting Metasploit Services

Module 7: Managing Hosts

• Host Management Interfaces
• Adding and Deleting Hosts
• Viewing and Editing Host Metadata
• Add, Edit, and Delete Service
• Add, Edit, and Delete Vulnerabilities

Module 8: Exploring Vulnerabilities

• Discovery Scan
• Vulnerability Scanning with Nexpose
• Importing Data
• Validating a Vulnerability
• Working with the Vulnerability Validation Wizard
• Validating Vulnerabilities Discovered by Nexpose
• Sharing Validation Results with Nexpose

Module 9: Working with Payloads

• Single and Staged Payloads
• Viewing Payloads
• Manually Selecting a Payload
• Auto Selecting a Payload
• Payload Generator

Module 10: Introduction to Credentials

• Understanding Credentials
• Managing
• Reusing
• Searching
• Bruteforce Attacks

Module 11: Overview of Metamodules

• Credentials Domino MetaModule
• Single Credential Testing MetaModule
• SSH Key Testing MetaModule
• Known Credentials Intrusion MetaModule
• Segmentation and Firewall Testing MetaModule

Module 12: Social Engineering

• Introduction to Social Engineering
• Managing Campaigns

Module 13: Automating Tasks

• Working with Task Chains
• Adding a Task to a Task Chain
• Manage and Edit Task Chains
• Scheduling Task Chains

Module 14: Introduction to Reporting

• Audit Reports
• Credentials Report
• FISMA and PCI Compliance Report
• Social Engineering Campaign Details Report
• Custom Templates
• MetaModule Reports

Module 15: Metasploit Framework

• Accessing MSFconsole
• Managing Database and Workspaces
• Modules
• Run Metasploit Remotely
• Tag Hosts in MFSconsole   

Module 16: Working with Pro Console

• About Pro Console
• Auto-Exploitation
• Manage Credentials
• Managing Notes, Tasks, and Vulnerabilities
• Scanning and Managing Hosts
• Pro Console Reports