Scanning and Reconnaissance with Metasploit

This reference manual walks through a full network reconnaissance and exploitation-assessment workflow using the Metasploit Framework, from initial host discovery through port scanning, service enumeration, vulnerability identification, exploitation, and centralized results tracking with the Metasploit database. The lab environment used throughout is a Kali Linux attacking host on the 172.31.37.0/24 network, with a Metasploitable 2 target machine at 172.31.37.25.

The Metasploit Framework is a modular and versatile penetration testing platform that allows security professionals to exploit vulnerabilities, test systems, and gather information about target networks. It provides a powerful command-line interface that enables testers to run several types of scans, discovery tools, and exploitation modules to conduct a thorough penetration test.

At its core, Metasploit is built on a modular architecture. It organizes tools, exploits, and auxiliary modules into individual components that can be mixed and matched as needed. Whether you are scanning a target, attempting exploitation, or conducting post-exploitation activities, Metasploit has a module for every phase of a test.