# Plan Authorized Metasploit Assessments

Security teams need a structured reference for complex Metasploit workflows. This skill organizes module selection, payload handling, sessions, post-exploitation, and reporting for authorized assessments.

## Install

```bash
npx skillstore add zebbern/sickn33-metasploit-framework
```

## Metadata

- Status: approved
- Slug: sickn33-metasploit-framework
- Skillstore revision: r2
- Version status: missing
- Tree hash: 253dd9741f9c4579e3988b4ab7ef5d1361fc3889158d7ee07438478f2ed70e30
- Author: zebbern
- GitHub username: sickn33
- License: MIT
- Repository: https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/metasploit-framework
- Ref: 81e05e636292629114b76cbb3922fbe57672fc02
- Supported tools: Claude, Codex, Claude Code
- Audit status: complete
- Agent install advisory: blocked
- Manual install advisory: allowed\_with\_warning
- Artifact signature: available
- Audit attestation: unavailable
- Human verification: not\_verified
- Risk factors: external\_commands, network, filesystem
- Quality score: 38
- Quality tier: warning
- Public page: https://skillstore.pages.dev/skills/sickn33-metasploit-framework
- Manifest: https://skillstore.pages.dev/api/skills/sickn33-metasploit-framework/manifest

## Capabilities

- Explains Metasploit module categories and console navigation.
- Shows how to search for modules by CVE, platform, type, and rank.
- Documents exploit options, payload selection, handlers, and sessions.
- Lists auxiliary scanning and post-exploitation module workflows.
- Provides msfvenom payload-generation examples for several platforms.
- Summarizes common commands, constraints, and troubleshooting steps.

## Use Cases

- Prepare a Controlled Lab: Review module categories and build a disposable environment before any authorized test.
- Structure an Assessment: Organize module research, option validation, evidence collection, and cleanup within written scope.
- Review Test Coverage: Compare planned validation activities with approved rules of engagement and defensive monitoring.

## Prompt Templates

### Learn the Module Types

```
Explain Metasploit module categories for a beginner. Use conceptual examples only and do not provide commands that affect a target.
```

### Plan a Safe Lab

```
Create a checklist for an isolated Metasploit training lab. Include authorization, snapshots, network isolation, evidence handling, and cleanup.
```

### Review an Authorized Scope

```
Review this written assessment scope: [scope]. Identify permitted targets, prohibited actions, confirmation gates, evidence requirements, and stop conditions.
```

### Design Defensive Validation

```
Design a non-destructive validation plan for [CVE] in [lab environment]. Include prerequisites, safe checks, monitoring, rollback, and reporting criteria.
```

## Limitations

- It does not verify authorization, ownership, or assessment scope.
- Its examples can compromise systems, collect credentials, and evade defenses.
- Commands require an existing Metasploit installation and suitable lab infrastructure.
- Payload success depends on target versions, architecture, network controls, and endpoint defenses.

## Best Practices

- Use only isolated systems covered by current written authorization.
- Show every target-changing command and obtain explicit confirmation before execution.
- Minimize collected data, preserve evidence, and remove test artifacts after validation.

## Anti Patterns

- Do not test public or third-party systems without explicit written permission.
- Do not use keylogging, credential dumping, persistence, or evasion outside approved research.
- Do not replace target placeholders until scope and network boundaries are verified.

## Security Audit

- Audited at: 2026-08-04T13:58:26.271\+00:00
- Summary: Markdown formatting and private example addresses caused many false positives, but the skill contains extensive actionable offensive guidance. Confirmed risks include exploitation, payload generation, keylogging, credential access, persistence, defense evasion, file transfer, network scanning, and privileged setup.

## Stats

- Views: 144
- Downloads: 10
- Favorites: 0
- Popularity score: 0