Ravi Sir's Cyber Security Cards › Revision Cards
What Metasploit Is
What Metasploit Is Metasploit is a free toolkit of ready-made exploits, payloads and tools. You pick a tested module , set a few options, and run it. A bind payload opens a port on the target. A reverse payload makes the target connect back to you. Reverse is better, because firewalls usually block
Read card text
What this card says
What it is
Metasploit is a free toolkit of ready-made exploits, payloads and tools.
You pick a tested module, set a few options, and run it.
Payload types
A bind payload opens a port on the target.
A reverse payload makes the target connect back to you. Reverse is better, because firewalls usually block incoming connections more than outgoing.
Why it matters for security
Use it only on lab VMs you own.
Every successful exploit should end with the patch that would have stopped it.
| Term | Meaning | Everyday picture |
|---|---|---|
| Exploit | Code that uses a specific vulnerability | The key that fits one lock |
| Payload | What runs on the target after the exploit works | What you do once inside |
| Module | Any single tool in Metasploit (exploit, scanner, etc.) | One tool in the box |
| Listener / handler | Waits for the target to connect back | You waiting by the phone |
| Session | Your live connection to a compromised host | The open line |
Learn more in the lesson: 23.1 What Metasploit Is