Aux Lab
search/info/show options/run one aux scanner against $LAB — capture defender notes.
Visual · msf_aux_lab
Lab: one aux module on $LAB. Original Cyberlium.
One module, one IP, one log story.
Pick an auxiliary scanner matching your $LAB service (e.g., HTTP or SMB). search, use, show options, set RHOSTS $LAB, run with low threads. Save module name and output summary — not a full pentest report on neighbors.
1. Module pick
search auxiliary scanner matching $LAB service.
info confirms intent and options.
Command guide
Try these commands — Module pick
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
db_nmap — https://docs.rapid7.com/metasploit/manage-the-database/ MITRE Discovery — https://attack.mitre.org/tactics/TA0007/
═══ INSTALL ═══
Linux (Debian/Ubuntu): Kali: preinstalled, or: sudo apt install metasploit-framework Kali: sudo msfdb init
Command — copy this
sudo apt install nmap
macOS: Prefer Kali/Linux VM — brew install metasploit (heavy) Inside Kali/Linux lab VM
Command — copy this
brew install nmap
Windows: Use Kali VM or WSL with metasploit-framework — not raw Windows host Inside Kali/WSL lab VM
Command — copy this
choco install nmap # or download https://nmap.org/download.html
═══ LINUX / macOS ═══
Command — copy this
msfdb status 2>/dev/null || echo 'Start msfdb in lab VM for db_nmap'
msfconsole -q -x 'db_status; db_nmap -sV ${LAB_HOST:-127.0.0.1}; hosts; services; exit' 2>/dev/null || echo 'db_nmap against LAB only'Primary tools to practice this lesson: msfconsole, msfdb, nmap. Reference sites: db_nmap (https://docs.rapid7.com/metasploit/manage-the-database/); MITRE Discovery (https://attack.mitre.org/tactics/TA0007/). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Controlled run
set RHOSTS $LAB. set THREADS low.
run — save redacted output.
3. Defender paragraph
Write what SIEM/IDS might show.
Confirm scan stopped after lab.
4. What you ship: aux lab pack
Module + RHOSTS + redacted output + defender paragraph.
5. What you record before the next lesson
Aux lab notes path.
6. Wrong vs right: stranger hosts vs YOUR lab VM
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
- Wrong: Run SMB aux against entire dorm subnet.
- Right: Single $LAB aux run. Next: quiz.
Mission: aux lab
1) search/use aux scanner. 2) show options; set RHOSTS $LAB; run. 3) Write defender signal paragraph.
Stuck? Ask Cyberlium AI Mentor
Ask Mentor: “Safe THREADS for lab?”
APPLY: Lab RHOSTS must be:
APPLY: True or False: Subnet aux on café Wi-Fi is lab.
APPLY: Pack includes: