Metasploit › Module 5 › Lesson 4
Options Lab
use → show options → set RHOSTS $LAB → check if supported — run only per explicit brief on $LAB.
Visual · msf_options_lab
Options lab on $LAB. Original Cyberlium.
Opening
Preflight on $LAB: options filled, check read, run only if the course brief says so.
Chain: use module matching YOUR $LAB service → show options → set RHOSTS $LAB → set other required fields → check (if available) → record output. If course brief forbids run, stop after check. Never public RHOSTS. Never persistence on host OS. Next: Quiz — Options Literacy.
1. Lab steps
Document each command. RHOSTS must equal RoE $LAB. LHOST on attacker lab segment only.
Command guide
Try these commands — Lab steps
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
Options lab — https://docs.rapid7.com/metasploit/using-metasploit/ MITRE ATT&CK — https://attack.mitre.org/ (map options to technique)
═══ INSTALL ═══
Linux (Debian/Ubuntu): Kali: preinstalled, or: sudo apt install metasploit-framework
Command — copy this
sudo apt install nmap
macOS: Prefer Kali/Linux VM — brew install metasploit (heavy)
Command — copy this
brew install nmap
Windows: Use Kali VM or WSL with metasploit-framework — not raw Windows host
Command — copy this
choco install nmap # or download https://nmap.org/download.html
═══ LINUX / macOS ═══
Command — copy this
nmap -Pn -p 22 "${LAB_HOST:-127.0.0.1}" 2>/dev/null | grep -E 'open|closed' || true
msfconsole -q -x 'use auxiliary/scanner/portscan/tcp; set RHOSTS ${LAB_HOST:-127.0.0.1}; set PORTS 22; show options; exit' 2>/dev/null || echo 'Portscan auxiliary on LAB only'Primary tools to practice this lesson: msfconsole, nmap. Reference sites: Options lab (https://docs.rapid7.com/metasploit/using-metasploit/); MITRE ATT&CK (https://attack.mitre.org/). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. When run is allowed
Only if explicit Cyberlium lab brief says run on $LAB snapshot. Otherwise stop at check or options set — transcript still valid.
3. Close
Revert VM snapshot after any run. chmod 600. Quiz next — then Payloads Literacy.
4. What you ship: options preflight transcript for $LAB
show options + set RHOSTS $LAB + check output. Run only if brief allows. chmod 600.
5. What you record before the next lesson
Date. Module. RHOSTS=$LAB proof. check result. File t14-m05-l04-options-lab.txt chmod 600.
6. Wrong vs right: stranger hosts vs YOUR lab VM
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
Wrong
set RHOSTS public IP because check failed on $LAB.
Right
Preflight on $LAB only. Next: Quiz — Options Literacy.
Mission: options lab on $LAB
1) use module for $LAB service 2) show options ; set RHOSTS $LAB 3) check if supported 4) run ONLY if brief explicitly allows 5) chmod 600 ; revert snapshot if run
Stuck? Ask Cyberlium AI Mentor
Snapshot revert is part of lab hygiene.
Knowledge Check
APPLY: Options lab RHOSTS must be:
Multiple choice
Knowledge Check
APPLY: True or False: Failed check on $LAB means try a public IP.
True or False
Knowledge Check
APPLY: After any run on lab VM:
Multiple choice