Plugins are readily available software that has been released by third parties and been approved by Metasploit. These plugins makes pentesters life easier, like msfconsole
.
Using Plugins
To start using plugins, we can navigate /usr/share/metaplsoit-framework/plugins
where the default plugins are saved. To load plugins, fire up msfconsole
and use load
.
msf6 > load nessus
[*] Nessus Bridge for Metasploit
[*] Type nessus_help for a command listing
[*] Successfully loaded Plugin: Nessus
msf6 > nessus_help
nessus_connect Connect to a Nessus server
nessus_logout Logout from the Nessus server
<SNIP>
And to install new plugins, we would save the .rb
file in the default plugin folder mentioned above.
Mixins
The Metasploit Framework is written in Ruby. This plays a big part in what makes msfconsole
excellent to use. Mixins are one of these features that, when implemented, offer a large amount of flexibility to both the creator of the script and the user.