Cyberlium

Metasploit › Module 4 › Lesson 2

BeginnerModule 4Lesson 2/5

Info Docs

info shows description, options, references — read the manual before $LAB.

15 min+40 XP3 quiz
Module progress2 of 5

Visual · msf_info_docs

info module_path. Original Cyberlium.

Opening

info is the module's README — defenders read the same text for detection ideas.

`info exploit/windows/smb/ms17_010_eternalblue` (example path) shows description, targets, options, references, rank. References link to CVE and vendor advisories — patch literacy. You still do not run until Module 5 options and RoE cross-check. Next: Use Before Run.

1. What info shows

Description, authors, disclosed date, available targets, basic options, references. Enough to decide if module matches YOUR $LAB service versions.

Mismatch = pick a different lab snapshot, not 'try anyway on production.'

Command guide

Try these commands — What info shows

═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)

info command — https://docs.rapid7.com/metasploit/msf-console-commands/ Module documentation — https://docs.rapid7.com/metasploit/using-metasploit/

═══ INSTALL ═══

Linux (Debian/Ubuntu): Kali: preinstalled, or: sudo apt install metasploit-framework

macOS: Prefer Kali/Linux VM — brew install metasploit (heavy)

Windows: Use Kali VM or WSL with metasploit-framework — not raw Windows host

═══ LINUX / macOS ═══

Command — copy this

msfconsole -q -x 'search type:exploit name:samba; info 0; exit' 2>/dev/null || msfconsole -q -x 'search type:exploit; info 0; exit' 2>/dev/null || echo 'Read info before any lab run'

Primary tools to practice this lesson: msfconsole. Reference sites: info command (https://docs.rapid7.com/metasploit/msf-console-commands/); Module documentation (https://docs.rapid7.com/metasploit/using-metasploit/). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.

2. References for defenders

CVE links feed patch tickets; MITRE techniques may appear in writeups. Blue teams import references into VM rules.

3. Save excerpts

Copy description + one reference into notes — not full exploit output from unauthorized tests.

4. What you ship: info excerpt for one module

info output snippet: description + reference. No run. chmod 600.

5. What you record before the next lesson

Date. Module path. info excerpt. File t14-m04-l02-info-docs.txt chmod 600.

6. Wrong vs right: stranger hosts vs YOUR lab VM

Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.

  • Wrong

    Skip info and run because 'rank is great.'

  • Right

    info one module deeply. Next: Use Before Run.

Mission: info one module

1) Pick module from M3 table. 2) info module_path 3) Save description + reference chmod 600. No use/run.

Stuck? Ask Cyberlium AI Mentor

If description mentions patched versions, believe it.

Knowledge Check

1

APPLY: info command shows:

Multiple choice

Knowledge Check

2

APPLY: True or False: High rank means you can skip RoE.

True or False

Knowledge Check

3

APPLY: References help defenders:

Multiple choice

← Previous

Answer all 3 knowledge checks to continue. (0/3 answered)