{"enrichment":{"faq":[{"a":"metasploit-framework is a comprehensive platform for authorized security assessments. Start by launching msfconsole, then search for relevant exploit or auxiliary modules using the search command. Select your target module, set required options (RHOST, LHOST, LPORT), configure your payload, and execute. The framework guides you through each phase: reconnaissance with auxiliary scanners, exploitation to gain access, payload delivery, and post-exploitation activities like credential harvesting.","q":"How do I use metasploit-framework for penetration testing?"},{"a":"msfvenom is metasploit-framework's standalone payload generator. Use it to create custom malicious payloads for delivery to target systems. Specify your payload type (e.g., windows/meterpreter/reverse_tcp), set encoder options, and define output format. Generated payloads can be embedded in documents, executables, or scripts. Always pair payload generation with a corresponding metasploit-framework handler listener configured to receive and manage the resulting session.","q":"What is msfvenom and how do I create payloads with it?"},{"a":"metasploit-framework handles Meterpreter reverse shells through a two-step process. First, use msfvenom to generate a reverse shell payload specifying LHOST (your IP) and LPORT (listening port). Second, in msfconsole, set up a handler by selecting exploit/multi/handler, configuring the same payload type and ports, then running it. When the target executes the payload, metasploit-framework establishes the reverse connection and opens an interactive Meterpreter session for post-exploitation.","q":"How do I set up a meterpreter reverse shell in metasploit-framework?"},{"a":"metasploit-framework includes extensive post-exploitation modules for active Meterpreter sessions. Key capabilities include hashdump for credential harvesting, getsystem for privilege escalation, and auxiliary modules for system reconnaissance. Once you gain initial access through exploitation, these modules help you maintain persistence, extract sensitive data, and deepen system compromise during authorized assessments.","q":"What post-exploitation modules does metasploit-framework provide?"},{"a":"metasploit-framework organizes exploits by CVE, platform, and vulnerability type. Use the search command in msfconsole to find modules by CVE number or keyword. Once you identify a relevant exploit, set the target information (RHOST), select an appropriate payload, configure handler options, and execute. metasploit-framework automates vulnerability exploitation and payload delivery for authorized penetration testing engagements.","q":"How do I search for and exploit vulnerabilities using metasploit-framework?"},{"a":"metasploit-framework uses PostgreSQL for storing scan results and managing workspaces. Configure the database connection in msfconsole, then use auxiliary modules for reconnaissance\u2014such as SMB scanners, port scanners, and service enumeration tools. These auxiliary modules gather target information without exploitation, supporting the reconnaissance phase of authorized security assessments before you deploy exploits.","q":"How do I set up metasploit-framework database and auxiliary scanning?"}],"shadow_tags":["vulnerability-exploitation","payload-generation","post-compromise-access","security-assessment-framework","reverse-shell-delivery","network-reconnaissance","privilege-escalation-tools","credential-extraction","authorized-testing"],"summary_rewrite":"This skill guides you through Metasploit Framework operations for authorized security assessments, covering exploitation, payload generation, and post-exploitation activities. Navigate msfconsole, select from exploit and auxiliary modules, configure targets and payloads, and manage Meterpreter sessions for credential harvesting and system reconnaissance."},"files":[{"bytes":13213,"path":"skills/metasploit-framework/SKILL.md","sha256":"f36bf582247ab0daa5b2504a9354bfcd16dd7a359118e16511c5d12032d2cbe7","url":"https://skillfed.io/files/zebbern/claude-code-guide/metasploit-framework/93b733ed/SKILL.md"}],"id":"zebbern/claude-code-guide/metasploit-framework","links":{"html":"https://skillfed.io/zebbern/claude-code-guide/metasploit-framework","md":"https://skillfed.io/zebbern/claude-code-guide/metasploit-framework.md","repo":"https://github.com/zebbern/claude-code-guide"},"meta":{"agents_supported":[],"first_seen":"2026-07-28","forks":447,"language":"Python","last_updated":"2026-07-26","license":"MIT","name":"metasploit-framework","publisher":"zebbern","stars":4440},"relations":{"similar":[{"id":"CommonHuman-Lab/nyxstrike/exploitation"},{"id":"zebbern/claude-code-guide/pentest-commands"},{"id":"AgentSecOps/SecOpsAgentKit/pentest-metasploit"},{"id":"blacklanternsecurity/red-run/smb-exploitation"},{"id":"yaklang/hack-skills/reverse-shell-techniques"},{"id":"blacklanternsecurity/red-run/tomcat-manager-deploy"},{"id":"blacklanternsecurity/red-run/windows-token-impersonation"},{"id":"zebbern/claude-code-guide/ssh-penetration-testing"},{"id":"AgentSecOps/SecOpsAgentKit/ot-security-assessment"},{"id":"zebbern/claude-code-guide/ethical-hacking-methodology"}]},"slug":{"owner":"zebbern","repo":"claude-code-guide","skill":"metasploit-framework"},"version":"93b733ed"}