﻿1
00:00:00,610 --> 00:00:05,440
‫So MSF has such a wide variety of different commands.

2
00:00:06,700 --> 00:00:12,850
‫And they all have well-defined name conventions that will help you to rule the framework.

3
00:00:13,770 --> 00:00:14,540
‫So let's have a look.

4
00:00:15,880 --> 00:00:20,170
‫Core commands, these are the basic commands of Métis boy.

5
00:00:21,270 --> 00:00:26,340
‫You can use them to make general-purpose as well as framework level tasks.

6
00:00:28,210 --> 00:00:35,040
‫Module command, they're there to help you move between modules and to pass values to the variable,

7
00:00:35,620 --> 00:00:38,080
‫you can view and use a module with these commands.

8
00:00:39,520 --> 00:00:47,020
‫Job commands are basically used for interacting with your sessions to view the status of the jobs that

9
00:00:47,020 --> 00:00:47,620
‫you've started.

10
00:00:48,760 --> 00:00:56,320
‫Resource script command allow you to record and to run your own scripts to automate your routines,

11
00:00:57,070 --> 00:01:02,830
‫developer command allow you to edit the files and interact with Ruby.

12
00:01:04,380 --> 00:01:13,320
‫Database commands are like we were talking about before importing and exporting, as well as the connection

13
00:01:13,320 --> 00:01:15,810
‫to a database with these commands.

14
00:01:16,710 --> 00:01:18,540
‫That's where you're going to save your findings.

15
00:01:19,540 --> 00:01:26,770
‫And the credential commands are used when you activate the database and they help you to store and get

16
00:01:26,770 --> 00:01:30,010
‫credentials found while you're doing your penetration testing.

17
00:01:30,960 --> 00:01:36,850
‫So I chose Somerset's so that you get the basic idea about how to use them.

18
00:01:37,590 --> 00:01:42,170
‫So why don't we go ahead and jump in actually to see them in action?

19
00:01:43,140 --> 00:01:44,460
‫Go ahead and open your terminal.

20
00:01:46,880 --> 00:01:48,890
‫And just right MSF console.

21
00:01:50,610 --> 00:01:57,780
‫So this time you see that I don't put the Q as a parameter because, well, I don't want to view that

22
00:01:57,790 --> 00:02:00,750
‫banner banners are these funny things here.

23
00:02:01,750 --> 00:02:05,980
‫You can change them every time by typing the banner command.

24
00:02:07,450 --> 00:02:14,590
‫But believe me, that's not the actual fun part, you're going to find the real fun in later modules,

25
00:02:14,590 --> 00:02:17,050
‫but I want to make sure that you're well versed in the basics.

26
00:02:17,980 --> 00:02:24,970
‫So I'll choose to divide the MSF console commands into groups to show you in a more meaningful way and

27
00:02:25,360 --> 00:02:26,850
‫make it clear so.

28
00:02:27,340 --> 00:02:28,330
‫OK, let's start.

29
00:02:29,330 --> 00:02:39,110
‫Color command will provide a colorful output if you enable it now, by default, it is enabled and you

30
00:02:39,110 --> 00:02:42,410
‫may disable it for whatever reason you like.

31
00:02:43,070 --> 00:02:46,040
‫I'm going to enable it by putting in color.

32
00:02:46,050 --> 00:02:46,670
‫True.

33
00:02:47,630 --> 00:02:51,590
‫Now, to view the MSF version, just type the version command.

34
00:02:53,120 --> 00:03:00,080
‫All right, so this is my installation version when I was recording the course and then beside myself,

35
00:03:00,080 --> 00:03:05,570
‫console command, the interface allows you to execute Linux system commands.

36
00:03:06,170 --> 00:03:11,570
‫Now, I don't know if it's the same in Windows, but on Linux you have this flexibility.

37
00:03:12,990 --> 00:03:15,720
‫I can change my directory and view it.

38
00:03:19,200 --> 00:03:21,570
‫Or I can check my I.P. address.

39
00:03:22,690 --> 00:03:27,460
‫But anyway, I think you get the point, so you still have questions about the command.

40
00:03:28,730 --> 00:03:34,160
‫All right, so type this into the console and it will help you.

41
00:03:35,230 --> 00:03:37,060
‫Or just put help.

42
00:03:38,030 --> 00:03:42,890
‫And you'll see the same output and let's say this is not enough and.

43
00:03:43,860 --> 00:03:51,370
‫You want some specific info about a particular command type help and then the command name.

44
00:03:51,900 --> 00:03:54,360
‫So, for example, help workspace.

45
00:03:56,280 --> 00:03:58,290
‫Or maybe help, help.

46
00:03:59,250 --> 00:04:00,490
‫There's only so much I can do.

47
00:04:01,470 --> 00:04:03,600
‫OK, so type help search.

48
00:04:04,510 --> 00:04:11,770
‫And then let's have a look at the search command help output, so this command will really be helpful

49
00:04:12,100 --> 00:04:13,480
‫to find a module.

50
00:04:14,700 --> 00:04:22,140
‫And you're going to use it many times, it's OK, you just stick in a search term and you'll see the

51
00:04:22,140 --> 00:04:28,580
‫result and as you can see from the help screen, you can also be more specific while you're searching.

52
00:04:28,980 --> 00:04:32,690
‫So let's type in search name Java.

53
00:04:33,300 --> 00:04:38,370
‫Now, that is, you see, we'll bring up many Java related modules to the screen.

54
00:04:39,350 --> 00:04:42,950
‫That search name Java rank, excellent.

55
00:04:45,470 --> 00:04:46,640
‫2011.

56
00:04:47,610 --> 00:04:54,300
‫OK, so only three results, so obviously you can narrow the result by being more specific.

57
00:04:54,840 --> 00:04:57,870
‫OK, so the next thing is gripping.

58
00:04:58,800 --> 00:05:02,220
‫You can grab the output of this command like this.

59
00:05:03,920 --> 00:05:11,840
‫Métis Boite also records your history like bash, so it has a history file and with a history command,

60
00:05:12,620 --> 00:05:17,410
‫you can view what you have entered in the MSF console just like that.

61
00:05:18,170 --> 00:05:20,360
‫Here you can see some of my previous commands.

62
00:05:22,000 --> 00:05:26,410
‫But you can also save all the output, not only to history.

63
00:05:27,310 --> 00:05:30,310
‫So look at the spool command.

64
00:05:31,260 --> 00:05:40,830
‫Well, type spool and then the output file name, and then it will save everything spool, desktop,

65
00:05:41,520 --> 00:05:42,180
‫Ms.

66
00:05:42,180 --> 00:05:44,370
‫F dot log.

67
00:05:45,610 --> 00:05:50,910
‫So now whatever you see in MSF console will be saved to that fire.

68
00:05:52,240 --> 00:05:54,550
‫So let's get this file.

69
00:05:55,420 --> 00:05:57,700
‫And there it is, it saves everything.

70
00:05:58,930 --> 00:06:05,040
‫Here, you might want to type S'pore star, but I'm not going to do that now.

71
00:06:06,210 --> 00:06:13,830
‫In a penetration test, you may also configure the midpoint according to your needs, and you were allowed

72
00:06:13,830 --> 00:06:21,150
‫to save your configuration by simply typing the save command and then your configuration will be saved

73
00:06:21,150 --> 00:06:22,020
‫to that file.

74
00:06:24,170 --> 00:06:25,220
‫Now here.

75
00:06:26,270 --> 00:06:31,190
‫Because I'm not making any change to the default settings, you won't see anything.

76
00:06:32,710 --> 00:06:36,040
‫If you finish your work with Métis Point, you can then quit.

77
00:06:37,220 --> 00:06:44,090
‫By using quitte or the command, you can close up Métis ploy and exit just like that.

