Author: Occupy The Web

Metasploit is widely recognized as a powerful tool to conduct penetration testing and hacking on traditional IT systems, but few people recognize that it also has capabilities within the more obscure–but increasingly important– SCADA/ICS sector. Information security for SCADA/ICS is the next great frontier in our industry! If you want to learn more about SCADA/ICS […]

At times, we may want to create a custom payload (for more on Metasploit payloads, see Metasploit Basics, Part 3: Payloads). For instance, we may want to embed a payload/listener into an application or other malicious software that we hope the target clicks and we can take control of their computer. This is exactly what […]

In a previous tutorials in this Metasploit Basics series, we learned how to use hashdump to pull password hashes from a local system. In “Cracking Passwords with Hashcat”, you learned how to crack these hashes with hashcat. In each of these cases, the password hashes were the passwords of the users on the local system […]

Welcome back, my aspiring Metasploit Cyber Warriors! Recently, Rapid7, the developers of the world’s most popular exploitation framework Metasploit, released a totally new rebuild! It’s been almost 8 years since Metasploit 4 and it could not have come at a better time! Rapid7 has made some important changes to Metasploit to make it easier to […]