Metasploit For Beginners - #3 - Information Gathering - Auxiliary Scanners

Item: Metasploit For Beginners - #3 - Information Gathering - Auxiliary Scanners
Rating: 4
Author: PostSingularity Institute

by HackerSploit · View the channel on PSI

Applied Sciences & Engineering Computing & Cybersecurity URComputer security URHComputer fraud and hacking

🎙 HackerSploit 👥 1.0M 📅 January 7, 2018 ⏱ 12 min 👁 221K 📄 tutorial 🧭 2026-10-16

Available in: English (current) Français

Keywords

MetasploitNmapSSH scanPort scanningPenetration testing

Summary

This tutorial is the third installment in a beginner series on Metasploit, focusing on information gathering techniques using the Metasploit console. The presenter demonstrates how to use nmap from within msfconsole to perform a basic port scan with the -sT flag, and a stealth scan using -sS, on a Metasploitable 2 target machine. He then introduces auxiliary scanner modules, specifically the ssh_version scanner, to identify the SSH version running on the target. The video explains how to search for modules, use the ‘use’ command, set required options like RHOSTS and THREADS, and execute the scan with ‘run’ instead of ’exploit’. The demonstration is part of a legal lab setup, emphasizing ethical use. The tutorial concludes by suggesting further exploration of other scanners like FTP version detection and banner grabbing, and points to the presenter’s website for more resources.

138 words

Critical Evaluation

Value of the Information & Strength of the Argument

The video provides immediate practical value by showing exactly how to leverage Metasploit’s built-in tools for information gathering, a crucial first step in penetration testing. The argumentation is clear and methodical: each command is explained with its purpose, and the presenter reinforces good practices (e.g., using ‘run’ for scanners, setting threads high for efficiency). The step-by-step approach makes it accessible for beginners while offering insights that even intermediate users may find useful, such as the integration of nmap within msfconsole and the use of auxiliary modules.

Scientific Rigor, Source Quality, Title Accuracy

The scientific rigor is moderate; it’s a practical tutorial without external references, but it relies on well-established and widely used tools (Metasploit and nmap). The title accurately matches the content, and the video stays on-topic without deviation. The presenter’s explanation of the stealth scan is slightly oversimplified (the three-way handshake explanation is not fully accurate), but overall the technical instructions are sound. The use of a virtual lab ensures legality, aligning with professional ethics. No sources are cited within the video itself, but the description provides links to the presenter’s website and a related course, which serve as supplementary resources.

201 words

Title / Content Match

The title accurately reflects the content, which focuses on information gathering using auxiliary scanners within Metasploit.

Quality & Reliability

7/10

The tutorial presents standard, accurate usage of Metasploit and nmap for information gathering, with clear step-by-step commands. It lacks external citations but relies on established tools and practical demonstration.

Key Moments

Markers derived by PSI from the transcript: the creator did not define chapters.

Cited Sources

HackerSploit Website — The presenter's official website offering additional tutorials, PDFs, and hacking guides.
The Complete Deep Web Course 2017 — A related course by the same author on Udemy, promoted in the video description.

Concurring Sources

Metasploit Documentation — Official documentation confirms the usage of auxiliary scanner modules and the 'run' command.
Nmap Official Documentation — Nmap's -sS and -sT scan options are documented officially, aligning with the video's usage.

External References

billing.purevpn.com

Contribution & Novelties

This video contributes to the beginner Metasploit series by demonstrating a streamlined method for information gathering using auxiliary scanners. It uniquely combines nmap usage within msfconsole and highlights the ssh_version scanner as a practical example, filling a gap for newcomers who may be unaware of these built-in capabilities. The clear, step-by-step presentation enhances its educational value.

Pour aller plus loin :

Metasploit Documentation — Official documentation for deepening knowledge of modules and commands.
Nmap Official Site — Reference for nmap scanning techniques and options.
Metasploit Project on Wikipedia — Overview of the Metasploit framework’s history and capabilities.

97 words

Radar Profile

The radar profile shows a balanced set of scores, with quality and technical level slightly higher than quantity, indicating a focused tutorial that delivers clear explanations over extensive coverage. The fiabilité is solid due to reliance on standard tools, making it a reliable starting point for beginners.

Reliability 7/10

💬 Très positif. Sur les 30 commentaires analysés, la quasi-totalité exprime une grande satisfaction quant à la clarté des explications et au caractère pédagogique de la vidéo, avec des remerciements et des demandes de prolongement de la série.