msf > search cve:2010-2075Įxploit/unix/irc/unreal_ircd_3281_backdoor excellent UnrealIRCD 3.2.8.1 Backdoor Command Execution We’ll issue the search command from msfconsole followed by the CVE number. Let’s pick the CVE associated with port 6667 found by Nessus and see if Metasploit has anything on that. Vulns -p 1-65536 -s http # identified as http on any port Vulns -p 1-65536 # only vulns with associated services s >svc names> List vulns matching these service names p,-port >portspec> List vulns matching this port spec

Print all vulnerabilities in the database We will filter our search by port number to lighten the output of the command. Issuing help vulns will provide us with this command’s many options. msf > services 172.16.194.172ġ72.16.194.172 111 tcp rpc-portmapper openġ72.16.194.172 111 udp rpc-portmapper openġ72.16.194.172 1099 tcp rmi_registry openġ72.16.194.172 47161 tcp rpc-nlockmgr openġ72.16.194.172 52843 udp rpc-nlockmgr openįinally, and most importantly, the vulns command will list all of the vulnerabilities that were reported by Nessus and recorded in the results file. Next we execute the services command, which will enumerate all of the services that were detected running on the scanned system. Successfully imported /root/Nessus/nessus_scan.nbeĪfter importing the results file, we can execute the hosts command to list the hosts that are in the nbe results file. msf > db_import /root/Nessus/nessus_scan.nbe Let’s go ahead and import the nbe results file by issuing the db_import command followed by the path to our results file.

Workspace Switch between database workspaces Vulns List all vulnerabilities in the database Services List all services in the database

msf > helpĬreds List all credentials in the databaseĭb_connect Connect to an existing databaseĭb_disconnect Disconnect from the current database instanceĭb_export Export a file containing the contents of the databaseĭb_import Import a scan result file (filetype will be auto-detected)ĭb_nmap Executes nmap and records the output automaticallyĭb_status Show the current database status Next, we need to import the results into the Metasploit Framework. Upon completion of a vulnerability scan, we save our results in the nbe format and then start msfconsole.

Security Operations for Beginners (SOC-100).

Exploit Development Prerequisites (EXP-100).

How to use nessus scan website