Module auxiliary/scanner/http/backup_file Module auxiliary/scanner/http/webdav_website_content Module auxiliary/scanner/http/webdav_scanner Module auxiliary/scanner/http/webdav_internal_ip Module auxiliary/scanner/http/vhost_scanner Module auxiliary/scanner/http/svn_scanner Module auxiliary/scanner/http/robots_txt Module auxiliary/scanner/http/host_header_injection Module auxiliary/scanner/http/frontpage_login Module auxiliary/scanner/http/drupal_views_user_enum Module auxiliary/admin/http/tomcat_utf8_traversal Module auxiliary/admin/http/tomcat_administration Module auxiliary/scanner/http/open_proxy Module auxiliary/scanner/http/http_version We can use wmap_runВ with the -tВ flag to list all the enabled modules before we scan the target. (No profile file runs all enabled modules.) e Launch profile modules against all matched targets. m Launch only modules that name match provided regex. Type wmap_runВ at the prompt to view the options for this command. We should be good to go at this point, so the only thing left to do is to actually run the scanner. msf > wmap_targets -t ДЄnd use wmap_targetsВ with the -lВ flag to list the defined targets. We can define the target using wmap_targetsВ with the -tВ flag, followed by the URL. t Дќefine target sites (vhost1,urlvhost2,url) Next, we need to set the specific target URL we want to scan using wmap_targets. Now we can list the available sites using wmap_sitesВ with the -lВ flag. To add a site, use wmap_sitesВ with the -aВ flag followed by the site address. s Display site structure (vhost,url|ids) (level) (unicode output true/false) d Delete sites (separate ids with space) Type any of the commands to display their available options LetвЂ™s start by managing sites we wish to scan using wmap_sites. = et 2012ДЇrom here, if we type ?В to display MetasploitвЂ™s help menu, we should see the commands for WMAP and their descriptions at the top of the menu. ItвЂ™s easy to load the WMAP module with the load wmapВ command. msfconsoleДЇinally, we can check that database is loaded and working properly by using the db_status command: msf > db_status Now we can fire up Metasploit by typing msfconsole. Next, start the PostgreSQL service with service postgresql start. Creating configuration file '/usr/share/metasploit-framework/config/database.yml' This will create a default database and user for Metasploit to interact with.

We can initialize the database with the msfdb initВ command in theВ terminal. This allows for the import and export of scan results from other tools, as well as storage of discovered credentials, services, andВ other valuable data.

Metasploit utilizes a PostgreSQLВ database system, making it extremely useful to keep track of large amounts of information when conducting penetration tests. The first thing we need to do, if itвЂ™s not done already, is set up the Metasploit database, since this particular module needs it in order to run.

Use brute force port 80 metasploit