Metasploit Section 2 of 10
Module Types
Metasploit is built around a modular architecture. Understanding each module type is essential for effective use.
Exploit
Code that takes advantage of a vulnerability to gain control of a target.
Examples:
exploit/windows/smb/ms17_010_eternalblueexploit/multi/http/struts2_content_type_ognlPayload
Code that executes after a successful exploit — reverse shell, meterpreter, etc.
Examples:
windows/meterpreter/reverse_tcplinux/x64/shell/reverse_tcpAuxiliary
Scanner, fuzzer, or DoS tool that does not directly exploit vulnerabilities.
Examples:
scanner/http/dir_scannerscanner/smb/smb_versionPost-Exploitation
Modules for actions after compromise — hashdump, keylogging, persistence.
Examples:
windows/gather/credentials/mimikatzlinux/gather/enum_systemEncoder
Transforms payloads to evade antivirus and signature detection.
Examples:
x86/shikata_ga_naicmd/powershell_base64NOP
No-operation sled for buffer overflow exploits to ensure reliable payload execution.
Examples:
x86/opty2x64/simpleEvasion
Advanced anti-virus evasion beyond simple encoders.
Examples:
windows/windows_defender_exewindows/amsi_bypassTip
Use
show modules in msfconsole to list all available modules of each type.