Metasploit for Enterprise Penetration Testing
Most testers use a fraction of what the Metasploit Framework can do. This course takes it to depth for real engagements, covering custom modules, resource scripts, and the payload and evasion options that matter when a default payload gets caught.
You work entirely inside the academy lab under written authorization, learning to fit Metasploit into a wider toolchain rather than treat it as a single button, so it speeds up genuine testing instead of replacing your judgement.
- Duration
- 6 weeks
- Format
- Live online, instructor-led
- Prerequisites
- Hacker Tools, Techniques and Incident Handling
- Class size
- Capped at 12 learners
What you will be able to do
- Navigate the Metasploit Framework architecture and database model
- Select, configure and safely run exploits against lab targets
- Choose payloads and evasion options for a defended environment
- Automate repeatable tasks with resource scripts
- Write and load a simple custom module in Ruby
- Integrate Metasploit with scanners and manual testing
- Document Metasploit activity clearly in an engagement report
Course outline
5 modules
- How modules, sessions and handlers fit together
- The database and workspace model
- Managing large engagements in Metasploit
- Safe use on production-like targets
What you need before you start
- Completion of Hacker Tools, Techniques and Incident Handling or equivalent
- Comfort with Linux and basic networking
- Some scripting experience; Ruby is helpful but not required
Who this course is for
- Penetration testers who want more from Metasploit
- Security analysts validating vulnerabilities in a lab
- Red teamers standardising repeatable tooling
- Professionals preparing for the CompTIA PenTest+ exam
Where this leads
Prepares you for
PenTest+
Awarded by CompTIA
CompTIA issues the PenTest+ certification once you pass its exam; it is not awarded by the academy. The exploitation, tooling and reporting skills built here support the hands-on penetration testing workflow that PenTest+ evaluates.
Questions about this course
More in offensive security
CoreHacker Tools, Techniques and Incident Handling
Learn attacker tools and techniques from the defender's chair, then run a structured incident handling process, in a live online course from Toronto.
8 weeks · live online
Contact for pricingView outline
CoreWeb Application Penetration Testing
Hands-on web application penetration testing course that takes you from reconnaissance through exploitation and reporting, using the OWASP Top 10 and beyond.
8 weeks · live online
Contact for pricingView outline
CoreIoT Penetration Testing
An IoT penetration testing course covering firmware extraction and analysis, radio protocols, and the cloud and mobile backends behind connected devices.
8 weeks · live online
Contact for pricingView outline
Ready to launch your cyber security career?
Join the next live online cohort. No experience required, just bring the curiosity.