# Metasploit Framework Essentials

> Metasploit workflow, msfvenom payloads, Meterpreter post-exploitation, and pivoting. Exam limits MSF to one target.

- **URL:** https://hackindex.io/learn/oscp-pen-200-study-path/the-metasploit-framework
- **Certification:** [OSCP (PEN-200) Study Path](https://hackindex.io/learn/oscp-pen-200-study-path.md)
- **Estimated study hours:** 1.5
- **Published:** 2026-09-25
- **Updated:** 2026-09-27

Metasploit is the most widely used exploitation framework in penetration testing. PEN-200 covers msfconsole workflow (search, use, set, exploit), msfvenom payload generation, Meterpreter post-exploitation (hashdump, getsystem, portfwd, autoroute), and pivoting through compromised hosts. The OSCP exam limits Metasploit use to one target, so understanding manual alternatives is equally important.

## Known Service Exploits with Metasploit

Several classic vulnerabilities have ready-made Metasploit modules: vsftpd 2.3.4 backdoor, ProFTPd 1.3.3c, UnrealIRCd, BlueKeep, EternalBlue, and PrintNightmare. These modules demonstrate the Metasploit workflow: select the exploit, configure RHOSTS/LHOST/LPORT, choose a payload, and run. Each of these services also has a manual exploitation path documented on HackIndex.

> [!WARNING]
> HackIndex does not currently have dedicated pages for msfconsole usage, msfvenom payload generation, or Meterpreter post-exploitation commands. Refer to the PEN-200 course material for framework fundamentals, handler configuration, and Meterpreter scripting.

## Study material

- [vsftpd 2.3.4 Backdoor](https://hackindex.io/services/ftp/exploitation/vsftpd-234.md) (read, core)
- [ProFTPD 1.3.3c Backdoor](https://hackindex.io/services/ftp/exploitation/proftpd-133c.md) (read, core)
- [UnrealIRCd 3.2.8.1 Backdoor Exploitation](https://hackindex.io/services/irc/exploitation/unrealircd-backdoor-exploitation.md) (read, core)
- [BlueKeep CVE-2019-0708 – Unauthenticated RDP RCE](https://hackindex.io/services/rdp/exploitation/vulnerabilities/bluekeep-cve-2019-0708.md) (read, core)
- [Windows Initial Exploitation](https://hackindex.io/platforms/windows/exploitation/windows-initial-exploitation.md) (read, core)