SANS Pen Test Cheat Sheet: Metasploit

February 8, 2017

For the longest time we haven't had a proper blog post for our Metasploit Cheat Sheet. This is one of our most popular cheat sheets. It was created by Ed Skoudis and his team.

When we attend BSides and conferences like DerbyCon and ShmooCon we bring a ton of printed copies with us and give them out at the booth and attendees always grab a bunch for themselves and for friends back at the office. But, in case you can't make it to a local conference we are sponsoring, we're making it available online for you to download, print, and share.

Did you know that we teach Metasploit in our core SANS Pen Testing Course, SEC560: Network Penetration Testing and Ethical Hacking and in our newly revised and updated 2-day hands-on SEC580: Metasploit Kung Fu for Enterprise Pen Testing?

Oh... we just made something that we think is pretty nifty. Here is a desktop wallpaper, in multiple sizes, based on the Metasploit Cheat Sheet for you to download and use.

(Click on the image for full-sized version to download)

Metasploit_1280x1024

Metasploit_1920x1080

Metasploit_5120x2880

Download the 2-Page, PDF, Printable Version of Metasploit Cheat Sheet

Download: MetasploitCheatsheet2.0

Pen Test Cheat Sheets:

SANS Pen Test Training:

SEC580: Metasploit Kung Fu for Enterprise Pen Testing - learn Metasploit in-depth
SEC560: Network Penetration Testing and Ethical Hacking - our core penetration testing course.
SEC542: Web App Penetration Testing and Ethical Hacking - learn web application penetration testing.

Related Content

Penetration Testing and Ethical Hacking

HTTP Request Smuggling: Abusing Reverse Proxies

HTTP request smuggling is a special web application attack that tries to exploit differences between web servers and their reverse proxies.

Christopher Elgee

Penetration Testing and Ethical Hacking

Modifying Android Apps: A SEC575 Hands-on Exercise, Part 2

Introduction In the last installment of this article, we looked at the IsItDown application, and how it is designed not to run in the Android Emulator, and to include a super-annoying banner ad. We showed how the Apktool utility can be used to decompile an Android APK file, and how we can evaluate...

Penetration Testing and Ethical Hacking

Modifying Android Apps: A SEC575 Hands-on Exercise, Part 1

Introduction As a security professional, I'm called on to evaluate the security of Android applications on a regular basis. This evaluation process usually takes on one of two forms: Evaluate app security from an end-user perspectiveEvaluate app security from a publisher perspective While there is...