From the course: Metasploit Essential Training

Unlock the full course today

Join today to access over 24,900 courses taught by industry experts.

How to discover exploits

How to discover exploits

- Now the purpose of using Metasploit is really to identify specific targets, specific services, ports, applications, so that you can then perform a security analysis or maybe exploit that machine. Now, of course, it's important to understand how to identify exploits in the first place. So the nice thing about Metasploit is that we have a command called search where we are able to identify and find specific things. So first off, let's say I wanted to find anything that was related to mySQL. I would type search mySQL, press enter and you'll see it gives me, you can see here, number 29 is an auxiliary, and then 28 is an exploit. So we can return the list of exploits, scanners, you name it, that relate to that specific service. Now, if I was to change that, for example, to Microsoft SQL Server, so MSSQL server, and only want to show exploits, then I can just set the type property to be exploit. And this time around, none…

Contents