Search icon CANCEL
Arrow left icon
Explore Products
Best Sellers
New Releases
Books
Videos
Audiobooks
Learning Hub
Conferences
Free Learning
Arrow right icon
Arrow up icon
GO TO TOP
Hands-On Web Penetration Testing with Metasploit

You're reading from   Hands-On Web Penetration Testing with Metasploit The subtle art of using Metasploit 5.0 for web application exploitation

Arrow left icon
Product type Paperback
Published in May 2020
Publisher Packt
ISBN-13 9781789953527
Length 544 pages
Edition 1st Edition
Languages
Arrow right icon
Authors (2):
Arrow left icon
Harpreet Singh Harpreet Singh
Author Profile Icon Harpreet Singh
Harpreet Singh
Himanshu Sharma Himanshu Sharma
Author Profile Icon Himanshu Sharma
Himanshu Sharma
Arrow right icon
View More author details
Toc

Table of Contents (23) Chapters Close

Preface 1. Introduction
2. Introduction to Web Application Penetration Testing FREE CHAPTER 3. Metasploit Essentials 4. The Metasploit Web Interface 5. The Pentesting Life Cycle with Metasploit
6. Using Metasploit for Reconnaissance 7. Web Application Enumeration Using Metasploit 8. Vulnerability Scanning Using WMAP 9. Vulnerability Assessment Using Metasploit (Nessus) 10. Pentesting Content Management Systems (CMSes)
11. Pentesting CMSes - WordPress 12. Pentesting CMSes - Joomla 13. Pentesting CMSes - Drupal 14. Performing Pentesting on Technological Platforms
15. Penetration Testing on Technological Platforms - JBoss 16. Penetration Testing on Technological Platforms - Apache Tomcat 17. Penetration Testing on Technological Platforms - Jenkins 18. Logical Bug Hunting
19. Web Application Fuzzing - Logical Bug Hunting 20. Writing Penetration Testing Reports 21. Assessment 22. Other Books You May Enjoy

Metasploit Framework terminology

Now, let's go through the basic terminology of Metasploit Framework. We will be using these terms often in this book, so it's best to understand them thoroughly before we deep dive into Metasploit Framework (MSF) and its usage:

  • Exploits: When Metasploit starts up, it shows the count of publicly available exploits that are already available in the framework. An exploit is a piece of code that takes advantage of a vulnerability and gives us the desired output.
  • Payload: This is a piece of code that is delivered to the target system or an application via an exploit to perform an act of our choice. Payloads can actually be divided into three main types: singles, stagers, and stages:
    • Singles: These payloads are standalone and are usually used to perform simple tasks, such as opening notepad.exe files and adding users.
    • Stagers: This sets up...
lock icon The rest of the chapter is locked
Register for a free Packt account to unlock a world of extra content!
A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.
Unlock this book and the full library FREE for 7 days
Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of
Renews at £16.99/month. Cancel anytime