Metasploit Cheat Sheet

by Tim Keary

Widely reputed as the most used penetration testing framework, Metasploit helps security teams identify and verify vulnerabilities, improve security awareness and manage gnarly security situations. We've scoured through the docs and have put together the essential list of commands in a easy to reference Metasploit cheat sheet.

What’s included in the cheat sheet

The following categories and items have been included in the cheat sheet:

Framework Components

Framework Components
Metasploit Meterpreter		Run as a DLL injection payload on a target PC providing control over the target system
Metasploit msfvenom		Help create standalone payloads as executable, Ruby script, or shellcode

Meterpreter commands

Meterpreter commands
Basic and file handling commands
sysinfo	Display system information
ps	List and display running processes
kill (PID)	Terminate a running process
getuid	Display user ID
upload or download	Upload / download a file
pwd or lpwd	Print working directory (local / remote)
cd or lcd	Change directory (local or remote)
cat	Display file content
bglist	Show background running scripts
bgrun	Make a script run in background
Bgkill	Terminate a background process
background	Move active session to background
edit	Edit a file in vi editor
shell	Access shell on the target machine
migrate	Switch to another process
idletime	Display idle time of user
screenshot	Take a screenshot
clearev	Clear the system logs
? or Help	Shoes all the commands
exit / quit:	Exit the Meterpreter session
shutdown / reboot	Restart system
use	Extension load
channel	Show active channels

Process handling commands

Process handling commands
Command	Description
getpid:	Display the process ID
getuid:	Display the user ID
ps:	Display running processes
kill:	Stop and terminate a process
getprivs	Shows multiple privileges as possible
reg	Access target machine registry
Shell	Access target machine shell
execute:	Run a specified
migrate:	Move to a given destination process ID

Networking commands

Networking commands
ipconfig:		Show network interface configuration
portfwd:		Forward packets
route:		View / edit network routing table

Interface / output commands

Interface / output commands
enumdesktops		Show all available desktops
getdesktop		Display current desktop
keyscan_start		Start keylogger in target machine
keyscan_stop		Stop keylogger in target machine
set_desktop		Configure desktop
keyscan_dump		Dump keylogger content

Password management commands

Password management commands
hashdump		Access content of password file - Hash file

Msfvenom command options

Msfvenom command options
Switch	Syntax	Description
-p	-p (Payload option)	Display payload standard options
-l	-l( list type)	List module type i.e payloads, encoders
-f	-f (format)	Output format
-e	-e(encoder)	Define which encoder to use
-a	-a (Architecture or platform	Define which platform to use
-s	-s (Space)	Define maximum payload capacity
-b	-b (characters)	Define set of characters not to use
-i	-i (Number of times)	Define number of times to use encoder
-x	-x (File name )	Define a custom file to use as template
-o	-o (output)	Save a payload
-h	-h	Help