Metasploit basics and exploitation

TryHackMe rooms

• Metasploit: The Basics
• Metasploit: Scanning and Exploitation

Corresponding practice

• Use the room’s enumeration evidence to choose a module; do not begin with a blind exploit search.
• Read the module description, references, targets, required options, and check support before running it.
• On the authorised target, record the configured options and evidence of the resulting session.
• Note one manual validation that supports the Metasploit result.

Evidence to capture

• Enumeration-to-module decision table
• show options output with sensitive values removed
• Session evidence, cleanup steps, and remediation note

What I learned

Explain why framework output still needs manual validation and careful documentation.

Problems and dead ends

Record incorrect targets, payloads, routes, or option values.

What I will revisit

Repeat module selection from the scan evidence without following the walkthrough.