Metasploit: Exploitation

This room puts Metasploit to work against a real target. You'll use MSF's built-in scanners to enumerate the target (port scan, SMB, HTTP), store results in the MSF database, identify vulnerabilities, exploit them to get a shell, run post-exploitation to dump password hashes, and use msfvenom to generate a standalone payload (ELF reverse shell). The target is a Windows box running SMB and a web server. Key flags: THM-5455554845 from flag.txt, pirate's NTLM hash, and another user's password hash in /etc/shadow-style format. This room ties together the full MSF offensive workflow from recon to post-ex.