Hack Like a Pro: Metasploit for the Aspiring Hacker, Part 4 (Armitage) « Null Byte :: WonderHowTo

Welcome back, my hacker novitiates!As you know by now, theMetasploit Frameworkis one of my favorite hacking tools. It is capable of embedding code into aremotesystem and controlling it, scanning systems for recon, andfuzzingsystems to find buffer overflows. Plus, all of this can be integrated into Rapid7's excellent vulnerability scannerNexpose.Many beginners are uncomfortable using the interactive msfconsole and probably will be without a significant amount of hours spent using Metasploit. However, Metasploit does have other means of controlling the system that make system exploitation a touch easier for those of you uncomfortable with the command line.For those who are more comfortable using a graphical user interface (GUI), Raphael Mudge has developed one that connects to and controls Metasploit much like a Windows application. He calls it Armitage, and I've covered it briefly inmy Metasploit primerguide. Especially for new, aspiring hackers, Armitage can make learning hacking with Metasploit a quicker and much less painful process.Let's take a look a Armitage and see how it can make hacking simpler.Step 1: Download ArmitageThe first step, of course, is to download Armtage. If you haveBackTrackor the early versions ofKali, you probably don't have Armitage, but you can get itfrom Armitage's website.Click on the download button and it will pull up the following webpage. Make certain that you download the Linux version.Another download option includes usingthe command line tool aptitude. Just type the following to install it.kali apt-get install armitageIn addition, you can also use the GUI-based tool in Kali, the "Add/Remove Software," and search for "Armitage."Step 2: Start MetasploitOnce you have Armitage downloaded onto your system, the next step is to start Matsploit. Make certain the postgreSQL server is started by typing:kali > service postgresql startNow, start Metasploit by typing:kali > msfconsoleStep 3: Start ArmitageArmitage uses a client/server architecture where Metasploit is the server and Armitage is the client. In essence, Armitage is a GUI client that I can interact and control the Metasploit server.Start Armitage in Kali by typing:kali > armitageWhen you do so, you will see the following screen.If you are running Metasploit from your "home" system, leave these default setting and click "Connect." If you want to run Armitage on a remote system, simply put the IP address of the system running Metasploit in the window asking you for the "Host."Step 4: Start the RPC ServerArmitage connects to an RPC server in order to control Metasploit. You are likely to see the following screen after starting Armitage.In some cases, it make take awhile to connect, such as in the screen below.When Armitage finally connects to Metasploit's RPC server, you will greeted with the following screen.Success! You are now running Metasploit from an easy to use GUI.Step 5: Explore ArmitageNotice in the upper left-hand corner of the Armitage screen, you can see folders. These folders contain four types of Metasploit modules;auxiliaryexploitpayloadpostIf you have readmy earlier Metasploit tutorials, you know that this is how Metasploitorganizes its modules. For the beginner, the exploit andpayloadmodules are the most important.We can expand the exploit modules directory by clicking on the arrow head to its right. When we do so, it expands and show us its contents.It categorizes the exploits by the type of operating system (OS) they are designed for, such as Windows, BSD, Linux, Solaris, etc. Remember, exploits are specific to an operating system, an application, ports, services, and sometimes even the language. If we scroll to the Windows subdirectory and expand it, we see all the Windows exploits categorized by type.Now, when we are looking for an exploit to use on a particular system with a particular vulnerability, we can simply point and click to find it.Step 6: Hail Mary!Nearly everything you can do with the Metasploit console, you can with Armitage. There is one thing though that you do with Armitage that you cannot do with msfconsole (at least without scripting). That one thing is to throw the Hail Mary! The Hail Mary is where Armitage will throw every exploit it has against a site to see whether any of them work.Simply go to the "Attacks" menu at the top of Armitage and select "Hail Mary." When you click on it it warns you like in the screen below.This wouldn't really be effective in a hacking environment as its far from stealthy. It will create so much "noise" on the target that you will likely be detected immediately, but in a lab or pentesting environment, it can be useful to try numerous attacks against a target a see which, if any, will work.Armitage enables the aspiring hacker to quickly grasp the basics of Metasploit hacking and begin to use this excellent and powerful tool in very short order. We all owe Raphael Mudge a debt of gratitude for developing and giving away this excellent piece of software!Want to start making money as a white hat hacker?Jump-start your hacking career with our2020 Premium Ethical Hacking Certification Training Bundlefrom the newNull Byte Shopand get over 60 hours of training from cybersecurity professionals.Buy Now (90% off) >Other worthwhile deals to check out:97% off The Ultimate 2021 White Hat Hacker Certification Bundle99% off The 2021 All-in-One Data Scientist Mega Bundle98% off The 2021 Premium Learn To Code Certification Bundle62% off MindMaster Mind Mapping Software: Perpetual LicenseRelatedHow to Hack Like a Pro:Getting Started with MetasploitHack Like a Pro:Metasploit for the Aspiring Hacker, Part 1 (Primer & Overview)News:How to Study for the White Hat Hacker Associate Certification (CWA)Hack Like a Pro:How to Exploit and Gain Remote Access to PCs Running Windows XPHack Like a Pro:Metasploit for the Aspiring Hacker, Part 14 (Creating Resource Script Files)Hack Like a Pro:Metasploit for the Aspiring Hacker, Part 2 (Keywords)Hack Like a Pro:Exploring the Inner Architecture of MetasploitHow To:Do a Simple NMAP Scan on ArmatigeHow To:The Essential Skills to Becoming a Master HackerHack Like a Pro:Metasploit for the Aspiring Hacker, Part 10 (Finding Deleted Webpages)Hack Like a Pro:Metasploit for the Aspiring Hacker, Part 8 (Setting Up a Fake SMB Server to Capture Domain Passwords)Hack Like a Pro:Metasploit for the Aspiring Hacker, Part 13 (Web Delivery for Windows)Hack Like a Pro:Metasploit for the Aspiring Hacker, Part 7 (Autopwn)Hack Like a Pro:Metasploit for the Aspiring Hacker, Part 6 (Gaining Access to Tokens)Hack Like a Pro:Metasploit for the Aspiring Hacker, Part 11 (Post-Exploitation with Mimikatz)Hack Like a Pro:How to Remotely Install a Keylogger onto Your Girlfriend's ComputerHack Like a Pro:Metasploit for the Aspiring Hacker, Part 9 (How to Install New Modules)Hack Like a Pro:Metasploit for the Aspiring Hacker, Part 5 (Msfvenom)Mac for Hackers:How to Install the Metasploit FrameworkHack Like a Pro:Metasploit for the Aspiring Hacker, Part 3 (Payloads)Hack Like a Pro:Linux Basics for the Aspiring Hacker, Part 11 (Apache Web Servers)Hack Like a Pro:How to Use Hacking Team's Adobe Flash ExploitHack Like a Pro:Hacking Samba on Ubuntu and Installing the MeterpreterGoodnight Byte:HackThisSite, Realistic 3 - Real Hacking SimulationsCommunity Byte:HackThisSite, Realistic 3 - Real Hacking SimulationsCommunity Byte:HackThisSite, Realistic 5 - Real Hacking SimulationsCommunity Byte:HackThisSite, Realistic 4 - Real Hacking Simulations