how to hack with Metasploit

Metasploit is only one most power full tool

 It comes in two versions: commercial and free edition
If there is a big difference in the two versions, it is in this tutorial, we'll use the Community Edition of Metasploit (free).
As ethical hackers, "Use black distribution", which is embedded in Metasploit Community Edition with other tools of ethical hacking. But if you want to install as a standalone tool Metasploit, you can use it on systems that run on Linux, Windows or Mac OS X.
Hardware requirements for setting Metasploite are:
• 2 GHz + Processor
• 1 GB RAM available
• 1 GB + available disk space
Matasploit can be used with a command prompt or web UI.
To open in black, go to Applications -> Exploitation Tools -> Metasplight.
   

Kali Linux window

After Metasploit starts, you will see the following screen. Highlighted in red underline is the version of Metasploit.

Exploits of Metasploit
From Vulnerability Scanner, we found that the Linux machine that we have for test is
vulnerable to FTP service. Now, we will use the exploit that can work for us. The command
is:

use “exploit path”

The screen will appear as follows:

Then type mfs> show options in order to see what parameters you have to set in order
to make it functional. As shown in the following screenshot, we have to set RHOST as the
“target IP”.

We type msf> set RHOST 192.168.1.101 and msf>set RPORT 21

Then, type mfs>run. If the exploit is successful, then it will open one session that you can interact with, as shown in the following screenshot.

Metasplight payload
Payloads, in simple words, are simple scripts that hackers use to interact with a hacked system. Using payloads, they can transfer the data to the hunting system
Metasploid payloads can be of three types:
•   Singles: Singles are very small and designed to create some kind of
Communications, then go to the next step. For example, just creating a user

•    Staged: It is a payload that an attacker can use to upload a bigger file onto a
victim system.


•  Stages: The phase payload components that are downloaded by the Stagers module.
Various payload states provide advanced features with no size limit
As a genius and VNC injection

Payload usage - example
We use command show payloads. With the advantage of this, we can see the payload that we do
, And it will also show the payload which will help us upload / execute files. shoot system

To set the payload that we want, we will use the following command:

set PAYLOAD payload/path

Set the listen host and listen port (LHOST, LPORT) which are the attacker IP and port. Then set remote host and port (RPORT, LHOST) which are the victim IP and port.

Type “exploit”. It will create a session as shown below:

Now we can play with the system according to the settings that this payload offers.