> For the complete documentation index, see [llms.txt](https://106-sam.gitbook.io/ejptv2-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://106-sam.gitbook.io/ejptv2-notes/the-metasploit-framework-msf/exploitation/armitage.md).

# Armitage

## Metasploit GUIs

### Port Scanning & Enumeration With Armitage

* Armitage is a free Java based GUI front-end for the Metasploit Framework developed by Raphael Mudge and is used to simplify network discovery exploitation and post exploitation.
* Armitage provides you with the following functionality:
  * Visualizes targets
  * Automate port scanning 
  * Automate exploitation
  * Automate post exploitation
* Armitage requires the Metasploit Framework database and the Metasploit backend services to be enabled and running in order to function correctly.
* Armitage comes pre-packaged with Kali Linux and other penetration testing distributions.

DEMO

```
service postgresql start
msfconsole -q
armitage
```

Add hosts

* Go to hosts > add hosts > paste and click on add

To scan

* right-click on host and scan

Nmap Scan 

* Hosts > Nmap Scan > Quick Scan (OS detect)
* Right-click > services 
* Attacks > Find Attacks
* right-click > login
* Search rejetto 

***

### Exploitation & Post Exploitation WIth Armitage

DEMO

* search rejetto
* change the options 
* right-click > meterpreter > meterpreter session
* right-click > access > dump hashes > registry 
* right-click > explore > post modules
* right-click > explore > browse files
* right-click > explore > processes
* right-click > explore > screenshot
* View > loot
* View > Downloads
* Meterpreter > pivot > setup and add ip 
* Hosts > Add hosts 
* portfwd add -l 1234 -p 80 -r \<IP>

*Note*: portfwd add =l \<localport> -p \<remote port> -r \<Remote IP>

* badblue exploit&#x20;
* right-click > meterpreter > meterpreter session
* Host > operating system > windows 2016
* show process
* migrate to explorer
* dump hashes