1 00:00:00,800 --> 00:00:07,880 ‫All right, so I want to get something off my chest I need to share with you as a penetration tester, 2 00:00:08,690 --> 00:00:12,830 ‫it's really important to be organized while testing. 3 00:00:14,100 --> 00:00:19,620 ‫Now, you're probably going to find yourself in an information pool and I don't want you to drown, 4 00:00:19,660 --> 00:00:27,570 ‫it contains tons of details like credentials, vulnerable services, target scan reports, and the list 5 00:00:27,570 --> 00:00:28,290 ‫goes on and on. 6 00:00:29,630 --> 00:00:36,290 ‫So it is absolutely essential to keep track of what you've done on the network. 7 00:00:37,330 --> 00:00:47,110 ‫So this is why MSF has an option to cover with extensive support, multiple database systems, so configuring 8 00:00:47,110 --> 00:00:51,550 ‫a database to work with MSF will be a real time saver for you. 9 00:00:52,460 --> 00:00:56,120 ‫MSF supports Maisky well and PostgreSQL. 10 00:00:57,430 --> 00:00:58,630 ‫You can use both. 11 00:00:59,530 --> 00:01:08,020 ‫However, PostgreSQL, well, is the default one, which has built in support within MSF, and by using 12 00:01:08,020 --> 00:01:15,070 ‫this feature you can easily access scan information, export and import results, use the identified 13 00:01:15,070 --> 00:01:17,410 ‫information later on in module's. 14 00:01:18,320 --> 00:01:23,870 ‫Then you will also be able to keep your findings clean and well organized. 15 00:01:25,380 --> 00:01:31,250 ‫So go ahead and open your terminal again, metastable can use databases to store information. 16 00:01:32,540 --> 00:01:36,560 ‫So you have the option to start without a database. 17 00:01:37,470 --> 00:01:43,270 ‫But please, for better penetration testing experience, I do not recommend this. 18 00:01:44,070 --> 00:01:49,710 ‫So before starting the MSF console using a database, you need to run a sequence of commands. 19 00:01:50,720 --> 00:01:57,980 ‫The default installation of Métis Point framework on Colly uses PostgreSQL well, so you should first 20 00:01:57,980 --> 00:02:08,510 ‫start PostgreSQL from the Linux terminal by typing in System CTL Start PostgreSQL DOT service and now 21 00:02:08,510 --> 00:02:09,170 ‫the next thing. 22 00:02:10,460 --> 00:02:16,580 ‫Is creating an initializing the Métis Boik database in PostgreSQL. 23 00:02:16,610 --> 00:02:23,980 ‫Well, for this, you can use the MSF Debe command and here is the help screen for. 24 00:02:25,310 --> 00:02:31,040 ‫So let's check the database status by typing in MSF DB status. 25 00:02:31,880 --> 00:02:41,840 ‫And what comes up is PostgreSQL is running an MSF DB finds a database connection file and the default 26 00:02:41,840 --> 00:02:42,310 ‫directory. 27 00:02:43,040 --> 00:02:51,950 ‫So if you start MSF, DBI, it will use the information in this file for connecting to PostgreSQL. 28 00:02:51,980 --> 00:02:58,120 ‫Well, so I'm going to go ahead and delete that database and let's create it from the beginning. 29 00:02:59,040 --> 00:03:02,520 ‫And myself, Deb, the lead for deletion. 30 00:03:04,300 --> 00:03:09,760 ‫OK, so now initialization with Mzoudi in it. 31 00:03:11,640 --> 00:03:17,070 ‫Then start the MSF, DB with MSF, DB start. 32 00:03:18,200 --> 00:03:25,880 ‫Now, actually, when you run MSFC, it will automatically start PostgreSQL, you will, therefore you 33 00:03:25,880 --> 00:03:29,930 ‫can only use MSF DB But this is just my habit. 34 00:03:30,590 --> 00:03:32,850 ‫So I'll first run PostgreSQL. 35 00:03:32,850 --> 00:03:35,540 ‫You will then MSF dbe. 36 00:03:37,990 --> 00:03:39,850 ‫And I'm going to run it in quiet mode. 37 00:03:43,500 --> 00:03:45,780 ‫OK, MSF consul open. 38 00:03:46,720 --> 00:03:53,110 ‫Now, in order to do the database operations, MSF console has its own database commands. 39 00:03:54,190 --> 00:03:59,920 ‫So let's type in help database to get a look at these commands and here are some of them. 40 00:04:01,110 --> 00:04:03,150 ‫And you can see the names are very clear. 41 00:04:04,300 --> 00:04:17,770 ‫Check database status with DB status and Métis Boyte connected to default Ms F3, so you can change 42 00:04:17,770 --> 00:04:22,240 ‫this database, you can even create your own and connect to that. 43 00:04:22,960 --> 00:04:25,050 ‫And that is going to be our next goal. 44 00:04:26,130 --> 00:04:35,070 ‫And now I want to introduce you to the workspace concept and Métis White, it's more like working under 45 00:04:35,070 --> 00:04:36,210 ‫a project area. 46 00:04:36,240 --> 00:04:41,500 ‫I think so simply type workspace to see the available workspaces. 47 00:04:42,030 --> 00:04:44,730 ‫Now, here I have only the default one. 48 00:04:45,360 --> 00:04:54,060 ‫The workspace command has a help screen so you can add, delete and create workspaces with abandon according 49 00:04:54,060 --> 00:04:55,770 ‫to whatever your requirements are. 50 00:04:56,740 --> 00:05:02,320 ‫And the Vickerman will list the workspaces in a verb bowsman. 51 00:05:03,200 --> 00:05:09,560 ‫And I'll add a couple of workspaces by using a as my parameter. 52 00:05:12,360 --> 00:05:19,470 ‫And here are the workspaces that I have added now automatically, the last one is chosen, as you see 53 00:05:19,470 --> 00:05:19,840 ‫here. 54 00:05:20,610 --> 00:05:24,630 ‫Now, you can also delete a workspace by using the deep parameter. 55 00:05:26,550 --> 00:05:33,390 ‫And let's say you want to change your workspace any time, just write its name after the workspace command. 56 00:05:34,340 --> 00:05:37,400 ‫Well, I'm already using pen test for. 57 00:05:38,460 --> 00:05:42,540 ‫All righty, then, let's connect that boy to our own database.