Using databases in Metasploit
It is always a better approach to store the results when you perform penetration testing. This will help us build a knowledge base about hosts, services, and the vulnerabilities in the scope of a penetration test. In order to achieve this functionality, we can use databases in Metasploit. Connecting a database to Metasploit also speeds up searching and improves response time. The following screenshot depicts a search when the database is not connected:
In order to use databases, we need to start the Metasploit database service using the following command:
root@kali:~# service postgresql startroot@kali:~#msfdbinit
The service postgresql start
command initializes the PostgreSQLdatabase
service and the msfdbinit
command initializes and creates the PostgreSQL database for Metasploit.
Once the databases are created and initialized, we can quickly fire up Metasploit using the following command:
root@kali:~#msfconsole
This command will fire up Metasploit, as shown in the...