Checklist
One-page Topic 14 checklist — RoE, modules, payloads, sessions, aux, post, defense.
Visual · msf_checklist
Checklist consolidates MSF literacy. Original Cyberlium.
If it is not on the checklist, it gets skipped under pressure.
Assemble checklist sections: RoE/$LAB scope, search/info/show options, payload/handler pairing, sessions hygiene, aux lab-only scans, post brief limits, no persistence, defense signals, logging, teardown. Use in capstone against YOUR lab — not internet targets.
1. Scope and RoE
$LAB IP written. Host-only net. NEVER stranger scans/payloads/persistence.
Written stop conditions: café LAN, real workstations, ransomware.
Command guide
Try these commands — Scope and RoE
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
Metasploit best practices — https://docs.rapid7.com/metasploit/msf-overview/ MITRE ATT&CK — https://attack.mitre.org/ (capstone mapping)
═══ INSTALL ═══
Linux (Debian/Ubuntu): Kali: preinstalled, or: sudo apt install metasploit-framework
macOS: Prefer Kali/Linux VM — brew install metasploit (heavy)
Windows: Use Kali VM or WSL with metasploit-framework — not raw Windows host
═══ LINUX / macOS ═══
Command — copy this
msfconsole -q -x 'version; workspace; exit' 2>/dev/null || true grep -E 'roe|LAB|never' "$HOME/cyberlium-lab/t14-msf/roe.txt" 2>/dev/null; printf 'checklist: roe recon: lab only cleanup: revert VM ' >> "$HOME/cyberlium-lab/t14-msf/capstone-checklist.txt" grep . "$HOME/cyberlium-lab/t14-msf/capstone-checklist.txt" 2>/dev/null | head -10
Primary tools to practice this lesson: grep, msfconsole. Reference sites: Metasploit best practices (https://docs.rapid7.com/metasploit/msf-overview/); MITRE ATT&CK (https://attack.mitre.org/). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Console literacy
search, use, info, show options, set RHOSTS/LHOST/SESSION, run/exploit, sessions -l.
Handler start/stop documented.
3. Defense and teardown
Signal matrix row per module type. Logs reviewed. Sessions killed. Snapshot reverted.
Notes secured chmod 600.
4. What you ship: Topic 14 checklist
One-page MSF literacy + ethics + defense checklist.
5. What you record before the next lesson
Checklist file path.
6. Wrong vs right: stranger hosts vs YOUR lab VM
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
- Wrong: Use checklist as WAN hunting guide.
- Right: Checklist done. Next: capstone lab.
Mission: write MSF checklist
1) Scope/RoE section. 2) Console literacy section. 3) Defense/teardown section.
Stuck? Ask Cyberlium AI Mentor
Ask Mentor: “Top five checklist items?”
APPLY: Checklist includes:
APPLY: True or False: Checklist authorizes stranger targets.
APPLY: Teardown includes: