1.6 Metasploit Modules

Different types of modules
Show command
Search modules

Module is packaged collection of code in Metasploit Framework that run a scan, exploit target, and own target system etc.
Modules are categorized into 7 types:
auxiliary encoders evasion exploits nops payloads post

root@kali:/usr/share/metasploit-framework# ls
app documentation metasploit-framework.gemspec msfdb msfvenom script-exploit tools
config Gemfile modules msfrpc plugins script-password vendor
data Gemfile.lock msfconsole msfrpcd Rakefile script-recon
db lib msfd msfupdate ruby scripts

An auxiliary module are unique as they do not execute payload and perform actions supporting exploitation.
Aux modules are used for reconnaissance, scanning for vulnerable targets, data gathering, check web server misconfigurations etc.
Examples: scanners, fuzzers, and dos attacks.

Rapid7’s Metasploit team have created and released new evasion module type in Metasploit Framework.
Evasion module type gives Framework users the ability to generate evasive payloads without having to install external tools and provides a framework for developers to build their own evasion modules based on Metasploit’s research.

A post-exploitation module enables you to gather more information, own the exploited target system.
Examples: hash dumps and application and service enumerators.

A payload is the shell code that runs after an exploit successfully compromises a system. The payload enables you to define how you want to connect to the shell and what you want to do to the target system after you take control of it. A payload can open a Meterpreter or command shell.
Meterpreter is an advanced payload that allows you to write DLL files to dynamically create new features as you need them.

NOPS is no operation module. A NOP generator produces a series of random bytes that you can use to bypass standard IDS and IPS NOP sled signatures. Use NOP generators to pad buffers.