ABSTRACT

The fact that Metasploit causes the reader antivirus program to get agitated is a very good reason to consider using the framework on a Linux, Unix, or Mac platform. Another option is to consider using the version of Metasploit that comes included with BackTrack. The latest version of Metasploit gives the user the ability to encode an.exe file with a payload. Metasploit is a game changer; the days of payloads with bad icons easily picked up by Anti-Virus (AV) are over. Metasploit gives users the ability to put a payload into an existing executable that will not likely be detected by AV and will proceed right though the Windows firewall. These payloads can be added to executables by using the msfpayload and msencode programs of Metasploit. With a command prompt, the user can check to see if the administrator account was successfully enabled by typing net user administrator and viewing the results of the output.