Overview
Metasploit packages known exploits, privilege escalation helpers, credential collection and pivoting into one workflow.\nIts value for defenders is the same modules run against lab targets to validate whether a patch genuinely closed the hole.\nWorkspaces keep each engagement separate so findings stay attributable.
Indicators of Compromise
Signals that suggest this is present on a system.
- Meterpreter-stage connections from unexpected hosts
- Reverse shells to non-corporate destinations
- Post-exploitation enumeration commands in process logs