2KKUU7ita

218
Part IV: Hacking Operating Systems
Figure 11-12:
The main
Metasploit
console.
1. Download and install Metasploit (currently at version 4.4) from
www.metasploit.com/download.
I use the Windows version; all you have to do is download and run the
executable.
2. After the installation is complete, run the Metasploit GUI (now
referred to as MSFGUI), which is Metasploit’s main console.
There’s also a web-based version of Metasploit that you can access
through your browser (Metasploit Web), but I prefer the GUI interface.
You see a screen similar to the one shown in Figure 11-12.
3. Expand the Exploits option to see what exploits are available to run,
as shown in Figure 11-13.
If you know the specific vulnerability (say, Microsoft’s MS08-067), you
can simply enter part or all of the search term (such as ms08) in the
search field at the top and then click Find.
4. After you find the exploit you want to run against your target system,
simply double-click the exploit and then follow the steps starting with
selecting the target operating system, as shown in Figure 11-14; click
the Forward button.
Select Automatic Targeting if it’s available; otherwise, make your
best guess of which version of Windows is running and then click the
Forward button.