Metasploit (msfconsole)
The premier exploitation framework.
KaliParrothigh
pkg: metasploit-framework
msfconsole is the main interface to Metasploit, offering thousands of exploits, payloads, auxiliary and post modules in one workflow.
Syntax
msfconsole → use {module}; set {opts}; run
Example
msfconsole -q -x "use exploit/multi/handler; set PAYLOAD windows/meterpreter/reverse_tcp; run"
Starts a listener (handler) ready to receive a Meterpreter session from a payload.
Advantages
- Vast module library
- Integrated payloads, sessions, post-ex
- Scriptable and well documented
Disadvantages
- Heavy and intrusive
- Signatured by AV/EDR
- Powerful — easy to cause harm
Tags
#exploit#framework#metasploit
Official docs: Metasploit ↗
Related commands
Frequently asked questions
What is Metasploit (msfconsole) used for?
msfconsole is the main interface to Metasploit, offering thousands of exploits, payloads, auxiliary and post modules in one workflow.
What is an example Metasploit (msfconsole) command?
A common example is: msfconsole -q -x "use exploit/multi/handler; set PAYLOAD windows/meterpreter/reverse_tcp; run" — Starts a listener (handler) ready to receive a Meterpreter session from a payload.
Is Metasploit (msfconsole) part of Kali Linux?
Yes. Metasploit (msfconsole) ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install metasploit-framework.
What category of security tool is Metasploit (msfconsole)?
Metasploit (msfconsole) is a Exploitation tool with a high-risk profile when run against a live target.
Try recon tools live
Run real scans against a domain you control, stage by stage.