Vulnerability Scanning

#Metasploit

#metasploit-autopwn - a Metasploit plugin for easy exploit & vulnerability attack.

• takes a look at the Metasploit database and provides a list of exploit modules to use for the already enumerated services

• On a Kali terminal

wget https://raw.githubusercontent.com/hahwul/metasploit-autopwn/master/db_autopwn.rb
sudo mv db_autopwn.rb /usr/share/metasploit-framework/plugins/

• On msfconsole

load db_autopwn

db_autopwn -p -t
# Enumerates exploits for each of the open ports

db_autopwn -p -t -PI 445
# Limit to only the 445 port

• On msfconsole use the analyze command to auto analyze the contents of the MSFdb (hosts & services)

analyze

vulns