← ClaudeAtlas

pentest-metasploitlisted

Penetration testing framework for exploit development, vulnerability validation, and authorized security assessments using Metasploit Framework. Use when: (1) Validating vulnerabilities in authorized security assessments, (2) Demonstrating exploit impact for security research, (3) Testing defensive controls in controlled environments, (4) Conducting authorized penetration tests with proper scoping and authorization, (5) Developing post-exploitation workflows for red team operations.
aiskillstore/marketplace · ★ 329 · Testing & QA · score 85
Install: claude install-skill aiskillstore/marketplace
# Metasploit Framework Penetration Testing ## Overview Metasploit Framework is the industry-standard platform for penetration testing, vulnerability validation, and exploit development. This skill provides structured workflows for authorized offensive security operations including exploitation, post-exploitation, and payload delivery. **IMPORTANT**: This skill is for AUTHORIZED security testing only. Always ensure proper authorization, scoping documents, and legal compliance before conducting penetration testing activities. ## Quick Start Initialize Metasploit console and verify database connectivity: ```bash # Start PostgreSQL database (required for workspace management) sudo systemctl start postgresql # Initialize Metasploit database msfdb init # Launch Metasploit console msfconsole # Verify database connection msf6 > db_status ``` ## Core Workflow ### Penetration Testing Workflow Progress: [ ] 1. Verify authorization and scope [ ] 2. Configure workspace and target enumeration [ ] 3. Identify and select appropriate exploits [ ] 4. Configure payload and exploit options [ ] 5. Execute exploitation with proper documentation [ ] 6. Conduct post-exploitation activities (if authorized) [ ] 7. Document findings with impact assessment [ ] 8. Clean up artifacts and sessions Work through each step systematically. Check off completed items. ### 1. Authorization Verification **CRITICAL**: Before any testing activities: - Confirm written authorization from asset owner - R