exploiting-vulnerabilities-with-metasploit-framework

What problem does it solve? During an authorized red team engagement, guessing Metasploit module paths, choosing the wrong payload direction, or retrying blocked reverse shells wastes turns and fails to establish access. This Skill provides a disciplined workflow for operating Metasploit through the msfrpcd RPC interface so exploitation attempts are grounded in real module paths and adapted to segmented networks. ## Core Features & Use Cases - Module discovery and inspection: Use msf_search to find real module paths by keyword and msf_info to check rank, targets, and required options before running anything. - Exploitation with payload strategy: Run modules via msf_run with bind versus reverse payload guidance, target_host topology resolution, and automatic session recording with autoroute for pivoting. - Segmented-network fallback: Convert RCE into durable SSH access by planting an operator key with a cmd/unix/generic payload or establish_ssh_foothold instead of retrying blocked shells. - Session operation and pivoting: List, exec, and kill sessions with msf_session, then exploit deeper hosts hop by hop through autoroutes with bind payloads. - Use Case: A scan fingerprints Apache Struts on 10.0.0.12:8080. Search for the struts2 module, inspect its options, run it with a bind payload, then pivot through the resulting session to exploit a host only the foothold can reach. ## Quick Start Use the Metasploit skill to search for a module matching the fingerprinted service on the target host, inspect its required options, and exploit it with an appropriate payload.