Metasploit: Exploitation — Mastering Target Scanning, Payloads, and Post-Exploitation

The official room banner for Metasploit: Exploitation. Image Credit: TryHackMe.

Introduction

Welcome back to my walkthrough series on the Exploitation Basics module of the Cyber Security 101 path! This time we’re tackling Metasploit: Exploitation, the third room in the module.

In my previous article, Metasploit: Introduction, we covered the framework’s architecture, module types, and how to navigate msfconsole: using search, use, info, show options, and managing parameters with set and setg. This room builds directly on that foundation and puts it to work: scanning targets, organizing an engagement with the Metasploit database, running a vulnerability scan, exploiting a real service, and generating standalone payloads with msfvenom.

Catch up on my previous article, Metasploit: Introduction, by clicking the banner below.

The official room banner for Metasploit: Introduction. Image Credit: TryHackMe.

What we will cover

• Scanning targets from inside msfconsole with port scanning modules, nmap, and UDP/SMB service scanners
• Organizing an engagement using the Metasploit database, workspaces, and db_nmap
• Running a vulnerability…