Join Malcolm Shore for an in-depth discussion in this video Driving Metasploit through Python, part of Penetration Testing Essential Training.
- [Instructor] One of the more interesting protocols…which is used in both Windows and Linux is SMB.…This is the Session Management Block protocol…used to provide shared access to files, printers and so on.…It's also the access vector used…for attacks such as Comfica, WannaCry and Petya.…The primary port used for SMB is 445.…Accessing SMB means either finding an exploit…to break into the exposed port…or gaining access somehow to credentials.…
To see how we might interact with SMB,…we'll set up a listener that we can run the meterpreter.…We'll script this into a Python function…using the def statement.…Our current carly host is 10.0.2.11…and we'll use port 3000 for the listener.…We'll also set up an exploit…to run the Psexec attack from metasploit…and use a set of target credentials that we know.…To integrate with metasploit,…we write the commands we want to run…into the metasploit configuration file using Python,…and then execute the metasploit console.…
Below the def shell line, we have the shell function defined…
Cybersecurity expert Malcolm Shore reviews popular pen testing tools, as well as the Bash and Python scripting skills required to be able to acquire, modify, and re-use exploit code. He also provides a refresher on Kali Linux and introduces techniques for testing web services. At the end of this course, you'll be prepared to take more advanced training, and to pursue the popular Offensive Security Certified Professional (OSCP) certification.
- Pen testing overview
- Pen testing tools
- Bash scripting
- Python scripting
- Kali and Metasploit
- Web testing
- Finding exploit code
Skill Level Intermediate
Ethical Hacking: Penetration Testingwith Lisa Bock1h 20m Intermediate
1. What is Pen Testing?
2. Pen Testing Tools
3. Bash Scripting
4. Python Scripting
5. Kali and Metasploit
6. Web Testing
7. Understanding Exploit code
What's next1m 27s
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
This will not affect your course history, your reports, or your certificates of completion for this course.Cancel
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.
Notes are saved with you account but can also be exported as plain text, MS Word, PDF, Google Doc, or Evernote.