Check Literacy
check validates options against target — read failures before any run on $LAB.
Visual · msf_check_literacy
check after setting RHOSTS $LAB. Original Cyberlium.
check is the console asking 'are you sure this target matches?' — listen to no.
`check` (when supported) tests vulnerability presence without full exploit — still only against $LAB with RoE. Failures mean patched snapshot, wrong service, or wrong RHOSTS — not 'try harder on production.' Some modules lack check; then info + lab snapshot version is your guard. Next: Options Lab.
1. What check does
Probes target safely-ish for vuln fingerprint — safer than blind run, still active contact on $LAB only.
Check true does not mean 'attack strangers next.'
Command guide
Try these commands — What check does
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
check command — https://docs.rapid7.com/metasploit/using-metasploit/ Safe lab verification — https://docs.rapid7.com/metasploit/msf-overview/
═══ INSTALL ═══
Linux (Debian/Ubuntu): Kali: preinstalled, or: sudo apt install metasploit-framework
macOS: Prefer Kali/Linux VM — brew install metasploit (heavy)
Windows: Use Kali VM or WSL with metasploit-framework — not raw Windows host
═══ LINUX / macOS ═══
Command — copy this
msfconsole -q -x 'use auxiliary/scanner/ssh/ssh_version; set RHOSTS ${LAB_HOST:-127.0.0.1}; show options; exit' 2>/dev/null || echo 'Set RHOSTS to LAB only — check before exploit'Primary tools to practice this lesson: msfconsole. Reference sites: check command (https://docs.rapid7.com/metasploit/using-metasploit/); Safe lab verification (https://docs.rapid7.com/metasploit/msf-overview/). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Reading failures
Check false → revert snapshot, pick matching module, or fix RHOSTS typo. Do not escalate to run on out-of-scope hosts.
3. Defender angle
Check traffic still hits IDS — defenders tune for scan/exploit-check patterns. Your lab generates samples for blue team study.
4. What you ship: check behavior definition
Define check vs run. Note $LAB-only. chmod 600.
5. What you record before the next lesson
Date. check definition. File t14-m05-l03-check-literacy.txt chmod 600.
6. Wrong vs right: stranger hosts vs YOUR lab VM
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
- Wrong: check false on $LAB so run against gateway 'for comparison.'
- Right: Define check literacy. Next: Options Lab.
Mission: document check vs run
1) Write when to use check. 2) Write what check false means. 3) Confirm $LAB-only in note. Run only if explicit brief allows on $LAB.
Stuck? Ask Cyberlium AI Mentor
check false saves snapshots — listen to it.
APPLY: check command (when available):
APPLY: True or False: check true authorizes scanning strangers next.
APPLY: check false usually means: