Search icon CANCEL
Arrow left icon
Explore Products
Best Sellers
New Releases
Books
Videos
Audiobooks
Learning Hub
Conferences
Free Learning
Arrow right icon
Arrow up icon
GO TO TOP
Hands-On Web Penetration Testing with Metasploit

You're reading from   Hands-On Web Penetration Testing with Metasploit The subtle art of using Metasploit 5.0 for web application exploitation

Arrow left icon
Product type Paperback
Published in May 2020
Publisher Packt
ISBN-13 9781789953527
Length 544 pages
Edition 1st Edition
Languages
Arrow right icon
Authors (2):
Arrow left icon
Harpreet Singh Harpreet Singh
Author Profile Icon Harpreet Singh
Harpreet Singh
Himanshu Sharma Himanshu Sharma
Author Profile Icon Himanshu Sharma
Himanshu Sharma
Arrow right icon
View More author details
Toc

Table of Contents (23) Chapters Close

Preface 1. Introduction
2. Introduction to Web Application Penetration Testing FREE CHAPTER 3. Metasploit Essentials 4. The Metasploit Web Interface 5. The Pentesting Life Cycle with Metasploit
6. Using Metasploit for Reconnaissance 7. Web Application Enumeration Using Metasploit 8. Vulnerability Scanning Using WMAP 9. Vulnerability Assessment Using Metasploit (Nessus) 10. Pentesting Content Management Systems (CMSes)
11. Pentesting CMSes - WordPress 12. Pentesting CMSes - Joomla 13. Pentesting CMSes - Drupal 14. Performing Pentesting on Technological Platforms
15. Penetration Testing on Technological Platforms - JBoss 16. Penetration Testing on Technological Platforms - Apache Tomcat 17. Penetration Testing on Technological Platforms - Jenkins 18. Logical Bug Hunting
19. Web Application Fuzzing - Logical Bug Hunting 20. Writing Penetration Testing Reports 21. Assessment 22. Other Books You May Enjoy

Basic commands

Let's say we're working in an organization and we are provided with the credentials to access Nessus via the Metasploit terminal ONLY. In situations like these, it's always better to run some basic commands to understand what we can and cannot do. Let's have a look at these commands over the course of the following steps:

  1. The first command we can execute is nessus_server_properties in msfconsole. This command will give us the details regarding the scanner (Type, Version, UUID, and so on). Based on the type of scanner, we can set our scanning preferences, as shown here:
  1. The nessus_server_status command is used to confirm the status of the scanner so that we can determine whether it is ready. This is helpful in situations where the organization is using a cloud-based Nessus with distributed scanner agents. The output of the command is shown...
lock icon The rest of the chapter is locked
Register for a free Packt account to unlock a world of extra content!
A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.
Unlock this book and the full library FREE for 7 days
Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of
Renews at €18.99/month. Cancel anytime