Member-only story
Metasploit: The Basics (TryHackMe) — Walkthrough
28.10.2026
A walkthrough of the Jr Penetration Tester room Metasploit: The Basics, worked end to end — and read from both sides of the wire: every attacker step paired with what it looks like from the SOC.
The engagement
The room opens with a scenario: you have been brought onto a penetration test for Stratford Systems, and Metasploit is the tool you reach for. Metasploit: The Basics is the first room in the Metasploit and Exploitation module of the Jr Penetration Tester path, and it is a pure command-fluency room — almost every question asks for the exact msfconsole syntax rather than a flag copied off a target.
I spend most of my time on the other side of this. I work L1 SOC and build detection tooling, so when I run Metasploit my eye keeps drifting to what the box on the receiving end would have logged. That is the thread I pull through this walkthrough: each attacker action, and then the artefact it leaves for whoever is watching. If you only ever learn the red-team keystrokes, you miss half of what the tool is teaching you.
The room walks through five working tasks:
- What the Metasploit Framework is
- Core concepts and module types
- Navigating
msfconsole
