Monday 28 May 2012

Metasploit day-1

Vulnerability - a weakness which allows attacker to break into/ compromise a system's security.
Exploit - code which allows an attacker to take avantage of a vulnerable system
Payload - actual code which runs on the system after exploitation.

Payloads in depth
- singles: self contained payload which do a specific task
- stagers :
required as Singles can not deliver arbitraily large payload depending on exploit.
creates a network connection between attacker and victim
this i used to download Stages payloads
- Stages:
downloaded bby the Stagers and executed
typically do complex tasks like VNC, Meterpreter...