Welcome back, my budding hackers! The growth of the mobile device market has been dramatic over the past 10 years. From its birth in 2007 with the advent of the Apple phone, mobile devices now comprise over 50% of all web traffic in 2020. There are 5B mobile devices on the planet or about one […]

Welcome back, my aspiring cyber warriors! With the release of Metasploit 5, one of the most notable changes has been the addition of a new type of module type, the evasion modules. These new modules are designed to help you create payloads that can evade anti-virus (AV) software on the target system. Years ago, penetesters […]

Welcome back, my aspiring Metasploit Cyber Warriors! In this series, we are exploring the power and features of the world’s most popular and powerful exploitation framework, Metasploit. In this tutorial, we will be examining how to connect the postgresql database to Metasploit. In this way, we can speed up our Metasploit module searches, save our […]

Welcome back, my aspiring cyber warriors! Metasploit, one of my favorite hacking/pentesting tools, has so many capabilities that even after my many tutorials, I have only scratched the surface of its capabilities. For instance, it can be used with Nexpose for vulnerability scanning, with nmap for port scanning, and with its numerous auxiliary modules, nearly […]

Metasploit is widely recognized as a powerful tool to conduct penetration testing and hacking on traditional IT systems, but few people recognize that it also has capabilities within the more obscure–but increasingly important– SCADA/ICS sector. Information security for SCADA/ICS is the next great frontier in our industry! If you want to learn more about SCADA/ICS […]

At times, we may want to create a custom payload (for more on Metasploit payloads, see Metasploit Basics, Part 3: Payloads). For instance, we may want to embed a payload/listener into an application or other malicious software that we hope the target clicks and we can take control of their computer. This is exactly what […]

In a previous tutorials in this Metasploit Basics series, we learned how to use hashdump to pull password hashes from a local system. In “Cracking Passwords with Hashcat”, you learned how to crack these hashes with hashcat. In each of these cases, the password hashes were the passwords of the users on the local system […]

Welcome back, my aspiring Metasploit Cyber Warriors! Recently, Rapid7, the developers of the world’s most popular exploitation framework Metasploit, released a totally new rebuild! It’s been almost 8 years since Metasploit 4 and it could not have come at a better time! Rapid7 has made some important changes to Metasploit to make it easier to […]