πŸ”Œ Plugins

🧠 What Are They?

  • Third-party or built-in tools integrated into Metasploit.

  • Extend functionality (e.g., Nessus, Nexpose, sqlmap).

  • Automate tasks, simplify workflows, and enhance assessments.

  • Work via the Metasploit API and interact with the framework directly.


πŸ“‚ Plugin Directory

To view available plugins:

ls /usr/share/metasploit-framework/plugins

Sample output:

aggregator.rb      nessus.rb       sqlmap.rb      token_adduser.rb
db_credcollect.rb  openvas.rb      socket_logger.rb  ...

▢️ Loading a Plugin

Inside msfconsole:

load nessus

Output:

See plugin help:

If plugin doesn't exist:

Output:


πŸ”„ Installing New Plugins

πŸ”½ Download

Example: DarkOperator’s Metasploit Plugins πŸ”— https://github.com/darkoperator/Metasploit-Pluginsarrow-up-right

πŸ“₯ Install

πŸš€ Load in Metasploit

Sample Output:


πŸ§ͺ Plugin Example – pentest

Categories include:

  • πŸ” Discovery Commands

    • network_discover, discover_db, pivot_network_discover

  • πŸ’₯ Auto Exploit

    • show_client_side, vuln_exploit

  • πŸ“‘ Postauto

    • multi_post, sys_creds, multi_cmd, multi_meter_cmd

  • πŸ“ Project Commands

    • project

  • πŸ”§ Tradecraft

    • check_footprint


🌟 Common Plugins

Plugin
Status

nMap

Pre-installed

NexPose

Pre-installed

Nessus

Pre-installed

Mimikatz

Pre-installed (v1)

Incognito

Pre-installed

Railgun

Available

Stdapi

Pre-installed

DarkOperator

Optional install


🧬 Mixins

πŸ’‘ What Are Mixins?

  • Ruby modules used to include methods in classes (not inheritance).

  • Promote code reusability and flexibility.

🧾 Syntax

Mixins let you add features to multiple classes without writing the same logic repeatedly.

More info: πŸ”— Mixins in Rubyarrow-up-right


Let me know if you want flashcards, a quiz, or a visual cheat sheet next! πŸ“˜πŸ§ 

Last updated