[MUSIC PLAYING]
Hello, everyone.
Welcome to the Metasploit Framework course.
I'm your instructor, Alexis Ahmed.
Before we get started with the course,
let's actually take a look at what we'll
be covering within the course.
So firstly, we are going to be exploring or getting
an introduction to the Metasploit Framework.
And what this section will entail
will essentially take you through the process
of understanding how the Metasploit Framework is
designed, how it's structured, and how it works.
And once you have an idea of that,
we can then move on to the Metasploit fundamental section,
which will revolve around giving you
an understanding of how to install and configure
the Metasploit Framework.
Furthermore, we will also take you
through the process of interacting with the Metasploit
Framework databases, and how the Metasploit Framework database
interacts or interpolate with the user
workspaces within the Metasploit Framework.
So we'll also take you through the process of creating
and managing workspaces.
We'll then move on to the first important section
of this course, and that is information gathering
and enumeration with the Metasploit Framework.
This section is going to cover the process of performing
port scanning and enumeration with the Metasploit Framework.
So we'll take a look at how to utilize tools like Nmap
as well as other auxiliary modules that
can allow us to essentially enumerate as much information
as possible from our target systems.
We'll then take a look at vulnerability scanning
with the Metasploit Framework.
This will take all the information
that we gathered from the information gathering stage
and essentially utilize it to identify vulnerabilities
on our target systems.
So we'll take a look at how to utilize
various auxiliary modules to identify
whether a target is vulnerable to a particular exploit.
We'll also take a look at how to utilize a few other modules
within Metasploit that can allow us to identify vulnerabilities
within web applications.
And we'll also take a look at how
to import vulnerability scans or vulnerability scan reports
from Nessus, and how this information can
be imported and then utilized for exploitation.
After we've gathered all of this information,
we can then take a look at client-side attacks.
Client-side attacks with the Metasploit Framework
will essentially cover the process
of generating and encoding payloads
that can then be utilized to in various social engineering
campaigns to deliver malicious payloads onto target systems.
So we'll take a look at how to generate malicious payloads
for both the Windows and Linux systems.
And then we'll also cover the social engineering toolkit,
and how you can utilize this toolkit
to deliver your malicious payloads to the target systems.
We'll then move to host and service-based exploitation
with MSF, or the Metasploit Framework as it's known.
And this section will essentially
deal with the process of exploiting
services on Windows and Linux systems, but not just that.
We're also going to talk about exploiting
an inherent vulnerabilities within Windows and Linux
systems with the Metasploit Framework.
So we'll explore all the various exploitation modules
for various services, and for the two primary operating
systems that we are going to be covering within this course.
And that is, of course, Windows and Linux.
Once we're done with exploitation,
we can move on to the second most important phase
of this course, and that is post exploitation
with the Metasploit Framework.
This is where the Metasploit Framework really
starts to shine.
And what we're going to be covering
is essentially all the various post-exploitation techniques
involved during a penetration test.
And we're going to take a look at how
to utilize the Metasploit Framework to perform all
of these techniques, ranging from data
exfiltration to clearing your tracks,
as well as privilege escalation on both Windows and Linux
systems.
We'll then end the course by taking a look
at the various Metasploit graphical user interfaces,
like Armitage and the Metasploit Community Edition, which,
again, can be utilized to extend or expand
your functionality when utilizing the Metasploit
Framework.
So that is essentially an overview
of what we'll be covering within this course.
As per the prerequisites, you really
don't need to have any special skills,
or you don't have to have any previous experience
with penetration testing or with the Metasploit Framework.
The only two prerequisites that are required
are number one, a basic familiarity with the TCP
and UDP protocols, as we'll be performing
a lot of information gathering.
And having an understanding of these protocols
will, again, help you as you move along through this course.
Secondly, you also need to have some familiarity with Linux
and Windows operating systems.
Given that we exploiting these operating systems,
you should know how to navigate around
the Linux terminal as well as the Windows command prompt.
So you should have an understanding of that.
And in regards to the learning objectives
and what you should come out of this course with,
firstly, you should have a good understanding
of how the Metasploit Framework works and how it's structured.
You'll also learn how to install, configure, and manage
the Metasploit Framework, and manage your Metasploit
Framework installation.
You'll also learn how to perform in information gathering
and enumeration with the Metasploit Framework.
You will be able to identify and exploit
vulnerabilities on Windows and Linux targets
with the Metasploit Framework.
And finally, you should be able to perform
various post-exploitation attacks and techniques
like privilege escalation and data exfiltration
with the Metasploit Framework.
So that is all you need to know in regards to what we'll
be covering the prerequisites and the various learning
objectives.
So let's get started.