Metasploit Commands and Payloads

Metasploit's console commands and payload system give testers precise control over how an exploit is selected, configured, and executed.

Essential msfconsole Commands

Commands like search find modules by keyword, use selects a module, show options displays configurable parameters, set assigns values to those parameters, and exploit or run launches the module against the target.

Understanding Payloads

A payload is the code that runs on a target after a vulnerability is successfully exploited. Payloads range from simple command shells to fully interactive sessions that give the tester control over the compromised system.

Staged vs Non-Staged Payloads

Non-staged payloads send the entire payload in one piece, while staged payloads send a small initial stager that then downloads the rest, which can help evade size restrictions or basic detection.

Meterpreter

Meterpreter is Metasploit's advanced payload that runs in memory and offers a rich set of post-exploitation features, including file system access, privilege escalation modules, and pivoting to other systems on the network.