db_autopwn: automatic exploit matching in Metasploit
Match every open port already stored in the MSF database against known exploit modules automatically.
msfconsole·1 min read··INE Certification
db_autopwn isn’t built into modern Metasploit by default — it’s a plugin that needs installing, but once loaded it automates matching open ports on a target against known Metasploit modules.
Install
wget https://raw.githubusercontent.com/hahwul/metasploit-autopwn/master/db_autopwn.rb
sudo mv db_autopwn.rb /usr/share/metasploit-framework/plugins/Usage (inside msfconsole)
load db_autopwn
db_autopwn -p 445 -t # enumerate matching exploit modules for one port
db_autopwn -p -t # do it for every open port already in the DB
analyze
vulnsRelated
- Metasploit Framework — the
db_nmap/database setup this plugin depends on - From service version to working exploit — the manual version of the same matching process
- searchsploit — offline alternative when no MSF module matches
- WMAP — the equivalent automated matching for web app vulnerabilities