Post Named
Post modules run after session — enumerate/collect on $LAB with brief limits.
Visual · msf_post_named
Post = after-access module type. Original Cyberlium.
Post is not a free pass to dump every credential on the network.
use post/windows/gather/. or post/linux/. modules act on an existing session. search post name: finds them. show options includes SESSION id. Run only what YOUR lab brief allows on $LAB — literacy beats kitchen-sink post chains on real AD.
1. Post module role
Requires session — ties back to Module 7.
Categories: gather, manage, escalate — read info before run.
Command guide
Try these commands — Post module role
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
Post modules — https://docs.rapid7.com/metasploit/working-with-post-modules/ MITRE ATT&CK — https://attack.mitre.org/
═══ INSTALL ═══
Linux (Debian/Ubuntu): Kali: preinstalled, or: sudo apt install metasploit-framework
macOS: Prefer Kali/Linux VM — brew install metasploit (heavy)
Windows: Use Kali VM or WSL with metasploit-framework — not raw Windows host
═══ LINUX / macOS ═══
Command — copy this
msfconsole -q -x 'search type:post platform:linux; exit' 2>/dev/null || echo 'Post modules — lab session only'
Primary tools to practice this lesson: msfconsole. Reference sites: Post modules (https://docs.rapid7.com/metasploit/working-with-post-modules/); MITRE ATT&CK (https://attack.mitre.org/). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. SESSION option
set SESSION 1 targets session 1 from sessions -l.
Wrong SESSION id = wrong VM or error — verify label.
3. Brief-bound execution
Course labs list allowed post modules — do not improvise on host OS.
Defender view: credential access ATT&CK techniques map here — log them in notes.
4. What you ship: post module definition
Post requires session + SESSION option + brief limits.
5. What you record before the next lesson
Post definition + search example.
6. Wrong vs right: stranger hosts vs YOUR lab VM
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
- Wrong: Run every post/windows/gather on a stolen session.
- Right: Define post modules. Next: privesc literacy.
Mission: post vocabulary
1) Define post module. 2) search post one platform. 3) Explain SESSION option.
Stuck? Ask Cyberlium AI Mentor
Ask Mentor: “Post vs exploit difference?”
APPLY: Post modules need:
APPLY: True or False: Post modules may run on any internet host.
APPLY: SESSION option sets:
PrivEsc Literacy
Part of Metasploit Framework — Post Modules Literacy.
No Real Persistence
Part of Metasploit Framework — Post Modules Literacy.
Post Lab
Part of Metasploit Framework — Post Modules Literacy.