An important step in penetration testing is reconnaissance (information gathering). In this phase, the attacker aims to collect as much information as possible about their target or targets. During the reconnaissance phase, the attacker attempts to gather information that helps them plan and execute a successful attack. This information consists, for example, of open ports and the services listening behind them.

Metasploit can be used to scan attack targets during the reconnaissance phase. This scan helps identify potential vulnerabilities such as open services and ports that can be potential attack points. The following reconnaissance phase steps can be executed using Metasploit:

- **Port scanning**: Metasploit can perform port scanning on the target network. Ports are crucial for accessing network services and applications, and scanning them helps to identify open ports that an attacker could potentially use to gain access to the system.
- **Service identification**: Metasploit can identify the services and their versions that are in use on open ports. Metasploit can also integrate vulnerability assessment into scanning, which searches for vulnerabilities of identified services and software in its database.

*Mapping attack surfaces and potential vulnerabilities is naturally not necessary to perform with the Metasploit tool, but in this course we primarily focus on the opportunities it offers.*


Mapping the attack surface

Metasploit is a popular attack framework that helps professionals identify and exploit security holes. In this course, you will go through the use of Metasploit and learn how it can be used to carry out attacks and find security holes.

Metasploit, the Swiss Army Knife of Penetration Testing

Welcome to the wonderful world of Metasploit! Metasploit is a penetration testing framework used by cybersecurity professionals throughout the world.

In this context, a framework refers to a codebase. More specifically, it refers to a stack of reusable Ruby code that makes it convenient to create more Ruby code that does cyber stuff. Particularly, the framework is designed for penetration testing.

You don't need to know how to code in Ruby to use Metasploit. In the course, we will also explore customization and building our own modules, but Metasploit already has thousands of these modules ready for you to get started. Besides, Metasploit now also supports Python extensions.

Module is a Ruby file in the Metasploit directory that serves a specific purpose.

There are different types of modules for different purposes. For example, the 

 modules (located in the exploits directory) are attacks that exploit a vulnerability and typically open a command channel to the compromised device, such as a server.

Modules are not used directly from files, but with tools of the Metasploit framework such as 

The flagship command-line tool of Metasploit is 

. With the tool, it is easy to search for and use Metasploit modules.

In the course, you progress step by step and practice using various techniques using Metasploit in the Hakatemian lab environment. After that, you will move on to exercises where you will no longer receive assistance, you only know the target's IP address, and you have access to Nmap and Metasploit, as well as the goal of breaking into the server by applying the skills you have learned in the course.

Mapping the attack surface

Learn to hack — start here