Metasploit 复习-永恒之蓝漏洞

打开数据库 service postgresql start

然后打开msfocnsole后可以查看数据库连接状态

我们可以来学习一下基本命令

banner：显示一个令人敬畏的metasploit横幅

toggic color:切换颜色

connect :与主机通信

handler:监听

back:返回上一级

unset:取消设置的选项

background:当前操作在后台运行

info:显示一个或者多个模块的信息

我们用show来查看都有哪些模块

比如exploits就是漏洞利用模块，比如包含ms17_010漏洞，auxiliary为辅助模块，payloads为载荷。

1	show all显示所有模块

如果是exploits模块，我们看顶上的分类，分别为漏洞等级，检查能否使用，描述（一般为应用场景）

如果是payloads模块就是操作系统/类型/名称

然后info 可以查看模块详细信息

我们可以用search来寻找想要的模块，search命令

msf6 > search
Usage: search [<options>] [<keywords>:<value>]

Prepending a value with '-' will exclude any matching results.
If no options or keywords are provided, cached results are displayed.

OPTIONS:
  -h                   Show this help information
  -o <file>            Send output to a file in csv format
  -S <string>          Regex pattern used to filter search results
  -u                   Use module if there is one result
  -s <search_column>   Sort the research results based on <search_column> in ascending order
  -r                   Reverse the search results order to descending order

Keywords:
  aka              :  Modules with a matching AKA (also-known-as) name
  author           :  Modules written by this author
  arch             :  Modules affecting this architecture
  bid              :  Modules with a matching Bugtraq ID
  cve              :  Modules with a matching CVE ID
  edb              :  Modules with a matching Exploit-DB ID
  check            :  Modules that support the 'check' method
  date             :  Modules with a matching disclosure date
  description      :  Modules with a matching description
  fullname         :  Modules with a matching full name
  mod_time         :  Modules with a matching modification date
  name             :  Modules with a matching descriptive name
  path             :  Modules with a matching path
  platform         :  Modules affecting this platform
  port             :  Modules with a matching port
  rank             :  Modules with a matching rank (Can be descriptive (ex: 'good') or numeric with comparison operators (ex: 'gte400'))
  ref              :  Modules with a matching ref
  reference        :  Modules with a matching reference
  target           :  Modules affecting this target
  type             :  Modules of a specific type (exploit, payload, auxiliary, encoder, evasion, post, or nop)

Supported search columns:
  rank             :  Sort modules by their exploitabilty rank
  date             :  Sort modules by their disclosure date. Alias for disclosure_date
  disclosure_date  :  Sort modules by their disclosure date
  name             :  Sort modules by their name
  type             :  Sort modules by their type
  check            :  Sort modules by whether or not they have a check method

Examples:
  search cve:2009 type:exploit
  search cve:2009 type:exploit platform:-linux
  search cve:2009 -s name
  search type:exploit -s type -r