Introduction

Let us start this chapter with a formal introduction to exploits. Exploit can be a piece of software, a chunk of data or a sequence of commands that takes advantage of vulnerability or a bug in another software to execute user-intended instructions. These user-intended instructions can cause unusual behavior in the vulnerable software. Exploits play a vital role in penetration testing as it can provide an easy entry into the target system.

So far, we have used the power of exploits extensively to perform penetration testing. The point to note here is that we cannot directly use any stand-alone proof of concept or exploit code into the Metasploit framework. We will have to convert it into a framework understandable module. The process is similar to development of auxiliary modules with some additional fields. This chapter will cover every detail that you need to know while you are working with exploits within the framework. We will not be covering those aspects which are related...