Metasploit

https://docs.rapid7.com/metasploit/
Admin
Metasploit is a powerful penetration testing framework that helps organizations assess their...
Tokens:129,203
Snippets:2,028
Trust Score:10
Update:3 months ago
Show doc for...
Tokens:
Raw
### View msfrpc-client example scripts

Source: https://docs.rapid7.com/metasploit/rpc-api

Locate and list the example scripts provided with the msfrpc-client gem installation.

```bash
# cd `gem env gemdir`/gems/msfrpc-client-*/examples
# ls
```

--------------------------------

### Launch Pro Console on Windows

Source: https://docs.rapid7.com/metasploit/about-the-pro-console

Navigate to the installation directory and execute the batch file to start the console.

```bash
$ cd /metasploit
$ console.bat
```

--------------------------------

### Install and Run MSFRPC-Client

Source: https://docs.rapid7.com/metasploit/running-metasploit-remotely

Installs the required gem and executes the example IRB script with specific RPC credentials.

```bash
gem install msfrpc-client
cd `gem env gemdir`/gems/msfrpc-client-[tab]/examples
ruby ./msfrpc_irb.rb --rpc-user [USER] --rpc-pass [PASS] --rpc-port 50505 --rpc-token [API KEY] --rpc-ssl false
```

--------------------------------

### Execute Metasploit Installer

Source: https://docs.rapid7.com/metasploit/installing-metasploit-pro

Run the installer with root privileges to begin the installation process.

```bash
sudo ./metasploit-latest-linux-x64-installer.run
```

--------------------------------

### Install Metasploit on Linux

Source: https://docs.rapid7.com/metasploit/installing-the-metasploit-framework

Download and execute the installation script to set up the framework on Linux systems.

```bash
curl https://raw.githubusercontent.com/rapid7/metasploit-omnibus/master/config/templates/metasploit-framework-wrappers/msfupdate.erb > msfinstall && chmod 755 msfinstall && ./msfinstall
```

--------------------------------

### Start Metasploit Services

Source: https://docs.rapid7.com/metasploit/managing-metasploit

Starts the Metasploit service suite.

```bash
'/opt/metasploit/ctlscript.sh start'
```

--------------------------------

### Execute Metasploit Installer

Source: https://docs.rapid7.com/metasploit/installing-metasploit-pro

Run the installer with or without root privileges.

```bash
$ sudo ./metasploit-latest-linux-x64-installer.run
or
$ ./metasploit-latest-linux-x64-installer.run
```

--------------------------------

### Launch msfconsole on Windows

Source: https://docs.rapid7.com/metasploit/installing-the-metasploit-framework

Execute the batch file from the command line to start the Metasploit console after installation.

```bash
$ msfconsole.bat
```

--------------------------------

### Start Specific Service

Source: https://docs.rapid7.com/metasploit/managing-metasploit

Starts an individual service component.

```bash
'/opt/metasploit/ctlscript.sh start worker'
```

--------------------------------

### Download Metasploit Installer

Source: https://docs.rapid7.com/metasploit/installing-metasploit-pro

Use wget to download the latest Linux installer package.

```bash
$ wget https://downloads.metasploit.com/data/releases/metasploit-latest-linux-x64-installer.run
```

--------------------------------

### Install librex and msfrpc-client gem

Source: https://docs.rapid7.com/metasploit/rpc-api

Install the required dependencies and the msfrpc-client gem to enable RPC communication.

```bash
# gem install librex --no-rdoc --no-ri
```

```bash
# gem install msfrpc-client
```

--------------------------------

### Launch Metasploit on Windows

Source: https://docs.rapid7.com/metasploit/managing-metasploit

Navigate to the installation directory and execute the console batch file.

```bash
$ msf > cd /metasploit $ msf > console.bat
```

--------------------------------

### Set Installer Permissions

Source: https://docs.rapid7.com/metasploit/installing-metasploit-pro

Change the file mode to make the installer executable.

```bash
user@ubuntu:~4 chmod +x ./metasploit-latest-linux-x64-installer.run
```

--------------------------------

### Launch Pro Console on Linux

Source: https://docs.rapid7.com/metasploit/about-the-pro-console

Navigate to the installation directory and execute the console with root privileges.

```bash
$ cd /opt/metasploit
$ sudo msfpro
```

--------------------------------

### Set Installer Permissions

Source: https://docs.rapid7.com/metasploit/installing-metasploit-pro

Change the file mode to make the downloaded installer executable.

```bash
$ chmod +x ./metasploit-latest-linux-x64-installer.run
```

--------------------------------

### Launch Metasploit on Linux

Source: https://docs.rapid7.com/metasploit/managing-metasploit

Navigate to the installation directory and execute the console with root privileges.

```bash
$ msf > cd /opt/metasploit $ msf > sudo msfpro
```

--------------------------------

### Start msfconsole on Linux

Source: https://docs.rapid7.com/metasploit/installing-the-metasploit-framework

Run the console executable from the terminal.

```bash
$ ./msfconsole
```

--------------------------------

### Host JSON Response Example

Source: https://docs.rapid7.com/metasploit/rest-api

Example of the JSON object returned when querying for host details within a workspace.

```json
{
"id":1,
"created_at":"2015-04-07T13:02:26-07:00",
"address":"10.20.33.22",
"mac":"",
"comm":null,
"name":"host2",
"state":"alive",
"os_name":"",
"os_flavor":"",
"os_sp":"", "os_lang":null,
"arch":null, "workspace_id":1,
"updated_at":"2015-04-07T13:02:26-07:00",
"purpose":"", "info":null,
"comments":null,
"scope":null,
"virtual_host":null,
"note_count":0,
"vuln_count":0,
"service_count":0,
"host_detail_count":0,
"exploit_attempt_count":0,
"cred_count":0,
"nexpose_data_asset_id":null,
"history_count":0,
"detected_arch":null
}
```

--------------------------------

### Start Metasploit services via control script

Source: https://docs.rapid7.com/metasploit/restarting-metasploit-services

Commands to start the entire Metasploit suite or a specific service using the control script.

```bash
 /opt/metasploit/ctlscript.sh start
```

```bash
  /opt/metasploit/ctlscript.sh start worker
```

--------------------------------

### Start MSFRPCD Utility

Source: https://docs.rapid7.com/metasploit/running-metasploit-remotely

Executes the RPC daemon directly from the Framework directory.

```bash
$ ruby msfrpcd -U <USERNAME> -P <PASSWORD> -f
```

--------------------------------

### Start Metasploit Daemon

Source: https://docs.rapid7.com/metasploit/running-metasploit-remotely

Launches the msfd utility to enable remote daemon access.

```bash
$ ruby msfd -a 0.0.0.0
```

--------------------------------

### Start Database Using Configuration File

Source: https://docs.rapid7.com/metasploit/managing-the-database

Use the -y flag to point to your custom configuration file when connecting to the database.

```bash
msf > db_connect -y /opt/metasploit/config/database.yml
```

--------------------------------

### Metasploit Console Startup Output

Source: https://docs.rapid7.com/metasploit/installing-the-metasploit-framework

Example output displayed when the Metasploit console initializes successfully.

```text
Creating database at /Users/joesmith/.msf4/db
Starting Postgresql
Creating database users
Creating initial database schema
 
** Metasploit Framework Initial Setup Complete **
 
[*] Starting the Metasploit Framework console...-[*] The initial module cache will be built in the background, this can take 2-5 minutes...
/
 
Metasploit Park, System Security Interface
Version 4.0.5, Alpha E
Ready...
> access security
access: PERMISSION DENIED.
> access main security grid
access: PERMISSION DENIED....and...
YOU DIDN'T SAY THE MAGIC WORD!
YOU DIDN'T SAY THE MAGIC WORD!
=[ metasploit v4.11.0-dev [core:4.11.0.pre.dev api:1.0.0]]
+ -- --=[ 1454 exploits - 827 auxiliary - 229 post ]
+ -- --=[ 376 payloads - 37 encoders - 8 nops ]
+ -- --=[ Free Metasploit Pro trial: http://r-7.co/trymsp ]
msf >
```

--------------------------------

### Initiate Data Collection Request

Source: https://docs.rapid7.com/metasploit/pro-feature-api

Example of the RPC request structure for starting a collection task with specific parameters.

```ruby
[ "pro.start_collect", "<token>",
  {
  "workspace" => "Project1",
  "DS_SESSIONS" => "100 101 102",
  "DS_COLLECT_SYSINFO" => true,
  "DS_COLLECT_PASSWD" => true,
  "DS_COLLECT_SCREENSHOTS" => true,
  "DS_COLLECT_SSH" => true,
  "DS_COLLECT_FILES" => false
  }
]
```

--------------------------------

### Initiate a Nexpose scan

Source: https://docs.rapid7.com/metasploit/pro-feature-api

Example request structure for starting a new Nexpose scan using the pro.start_nexpose method.

```ruby
[ "pro.start_nexpose", "<token>",
  {
  "workspace" => "Project1",
  "DS_WHITELIST_HOSTS" => "192.168.0.0/24",
  "DS_NEXPOSE_HOST" => "127.0.0.1",
  "DS_NEXPOSE_PORT" => 3780,
  "DS_NEXPOSE_USER" => "nxadmin",
  "nexpose_pass" => "s3cr3t",
  "DS_SCAN_TEMPLATE" => "pentest-audit"
  }
]
```

--------------------------------

### Requesting Hosts via cURL

Source: https://docs.rapid7.com/metasploit/rest-api

Example of a GET request to retrieve a list of hosts, requiring a valid API token in the header.

```bash
$ curl -H "token:6bde125560088033c618c2app234" https://localhost:3790/rest_api/v2/workspaces/1/hosts
```

--------------------------------

### Initialize RPC Client

Source: https://docs.rapid7.com/metasploit/rpc-api

Sets up the client connection by requiring the necessary library and instantiating the MetasploitRPCClient with connection parameters.

```ruby
# Set up client
 
require_relative 'metasploit_rpc_client'
client = MetasploitRPCClient.new(host:host, token:api_token, ssl:false, port:50505)
```

--------------------------------

### Example log file output

Source: https://docs.rapid7.com/metasploit/find-recently-changed-logs

Sample output showing the file paths returned after running the search command.

```text
/opt/metasploit/apps/pro/engine/prosvc_stdout.log
/opt/metasploit/apps/pro/engine/license.log
/opt/metasploit/apps/pro/engine/log/audit.log
/opt/metasploit/apps/pro/engine/log/production.log
```

--------------------------------

### Workspaces Index Request Example

Source: https://docs.rapid7.com/metasploit/rest-api-endpoints

A sample URL for fetching all workspaces from a local Metasploit instance.

```text
https://localhost:3790/rest_api/v2/workspaces
```

--------------------------------

### Add a Workspace via RPC

Source: https://docs.rapid7.com/metasploit/sample-usage-of-the-rpc-api

Demonstrates how to initialize the RPC client and add a new workspace with specific network boundaries and descriptions.

```ruby
#
# NOTE: Workspace and Project are the same thing.
#
require_relative 'metasploit_rpc_client'
workspace_attrs = {
 
name: "FooCorp Pentest",
limit_to_network: true,
boundary: "10.2.3.1-10.2.3.24",
description: "A test of FooCorp's mission-critical internal Quake LAN."
}
 
# Setup stuff from CLI
api_token = ARGV[0]
host = ARGV[1]
 
# Make the client - set ssl to true in install environments
client = MetasploitRPCClient.new(host:host, token:api_token, ssl:false, port:50505)
client.call "pro.workspace_add", workspace_attrs
```

--------------------------------

### Load MSGRPC Plugin with Custom Configuration

Source: https://docs.rapid7.com/metasploit/rpc-api

Command to initialize the MSGRPC server with specific host, port, and authentication credentials.

```text
msf > load msgrpc ServerHost=192.168.1.0 ServerPort=55553 User=user Pass='pass123'
```

--------------------------------

### Web Vulnerability Show Example

Source: https://docs.rapid7.com/metasploit/rest-api-endpoints

An example URL for requesting a specific web vulnerability by ID.

```text
https://localhost:3790/rest_api/v2/workspaces/1/hosts/1/services/1/web_sites/1/web_pages/web_vulns/1
```

--------------------------------

### Workspace JSON Response Example

Source: https://docs.rapid7.com/metasploit/rest-api

Example of the JSON object returned when querying for workspace details.

```json
{
"id":1,
"name":"default",
"boundary":null,
"description":null,
"owner_id":null,
"limit_to_network":false,
"created_at":"2015-04-07T11:51:23-07:00",
"updated_at":"2015-04-07T11:51:23-07:00"
}
```

--------------------------------

### Create a project

Source: https://docs.rapid7.com/metasploit/working-with-projects

Use the -a option with the pro_project command to create a new project. The newly created project automatically becomes the active project.

```bash
msf-pro > pro_project -a HR
msf-pro > pro_project -a IT
msf-pro > pro_project -a ACC
 
default
HR
IT
*ACC
```

--------------------------------

### Power on Metasploitable 3

Source: https://docs.rapid7.com/metasploit/setting-up-a-vulnerable-target

Use this command within the workspace directory to start the virtual machine.

```bash
cd metasploitable3-workspace
vagrant up
```

--------------------------------

### Start the Metasploit RPC server

Source: https://docs.rapid7.com/metasploit/rpc-api

Run the msfrpcd tool from the framework directory to initialize the RPC interface with specified credentials.

```bash
# ruby msfrpcd -U <username> -P <username> -f
```

```bash
# ruby msfrpcd -U user -P pass123
```

--------------------------------

### Download Metasploit Linux Installer

Source: https://docs.rapid7.com/metasploit/installing-metasploit-pro

Use wget to download the latest Metasploit installer for Linux x64 systems.

```bash
wget https://downloads.metasploit.com/data/releases/metasploit-latest-linux-x64-installer.run
```

--------------------------------

### Install Xvfb on Linux

Source: https://docs.rapid7.com/metasploit/social-engineering-campaigns-report-image-broken

Commands to install the virtual frame buffer package required for generating report image previews.

```bash
$ sudo apt-get install xvfb
```

```bash
$ sudo yum install xorg-x11-server-xvfb
```

--------------------------------

### Show Module Options

Source: https://docs.rapid7.com/metasploit/manual-exploitation

Lists available configuration options for the currently loaded module.

```text
msf-pro > use exploit/windows/wins/ms04_045_wins
msf-pro exploit (ms04_045_wins) > show options
```

--------------------------------

### Display getsystem Help

Source: https://docs.rapid7.com/metasploit/meterpreter-getsystem

Displays the help menu and available options for the getsystem command.

```bash
meterpreter > getsystem -h
Usage: getsystem [options]
Attempt to elevate your privilege to that of local system.
OPTIONS:
 
    -h        Help Banner.
    -t  The technique to use. (Default to '0').
  0 : All techniques available
  1 : Service - Named Pipe Impersonation (In Memory/Admin)
  2 : Service - Named Pipe Impersonation (Dropper/Admin)
  3 : Service - Token Duplication (In Memory/Admin)
```

--------------------------------

### Install Offline Update Package

Source: https://docs.rapid7.com/metasploit/pro-updates-api

Installs an update package from the local filesystem. Requires a subsequent call to pro.restart_service to finalize.

```json
[ "pro.update_install_offline", "<token>", "/tmp/metasploit_pro_update.zip" ]
```

```json
{
"status" => "success",
"result" => "Installing",
"error" => ""
}
```

--------------------------------

### Install updates with pro.update_install

Source: https://docs.rapid7.com/metasploit/pro-updates-api

Initiates the download and installation of a specific update version. Requires a subsequent call to pro.restart_service to finalize the update.

```json
[ "pro.update_install", "<token>", { "version" => "20120125000001" } ]
```

```json
{
"status" => "success",
"result" => "Downloading",
"error" => ""
}
```

--------------------------------

### Initiate a report generation task

Source: https://docs.rapid7.com/metasploit/pro-feature-api

Example of calling the pro.report_start method with required parameters including workspace, name, report type, creator, and file format.

```ruby
[ "pro.report_start", "<token>",
  {
  workspace: workspace_name,
  name: "default_#{Time.now.to_i}",
  report_type: :audit,
  created_by: 'whoareyou',
  file_formats: [:pdf]
  }
]
```

--------------------------------

### Web Vulnerabilities Index Example

Source: https://docs.rapid7.com/metasploit/rest-api-endpoints

An example URL for requesting web vulnerabilities for a specific workspace, host, service, and web site.

```text
https://localhost:3790/rest_api/v2/workspaces/1/hosts/1/services/1/web_sites/1/web_pages/web_vulns
```

--------------------------------

### pro.start_discover

Source: https://docs.rapid7.com/metasploit/pro-feature-api

Launches a discovery scan against a range of IP addresses, identifying active hosts and services.

```APIDOC
## pro.start_discover

### Description
This method drives the scan action within the Metasploit Pro user interface. It launches a discovery scan against a range of IP addresses and stores the results in the backend database.

### Parameters
- **ips** (array) - Required - IP addresses and/or IP ranges to include in the scan.
- **workspace** (string) - Required - The project name that this scan should be part of.
- **username** (string) - Optional - The Pro username this scan task should be attributed to.
- **DS_BLACKLIST_HOSTS** (string) - Optional - Addresses within the ips range to exclude from the scan.
- **DS_PORTSCAN_SPEED** (string) - Optional - Scan speed (Paranoid, Sneaky, Polite, Normal, Aggressive, or Insane).
- **DS_PORTS_EXTRA** (string) - Optional - Additional TCP ports to include in the scan.
- **DS_PORTS_BLACKLIST** (string) - Optional - List of ports to always exclude.
- **DS_PORTS_CUSTOM** (string) - Optional - Overrides the built-in port list to only scan these ports.
- **DS_PORTSCAN_TIMEOUT** (integer) - Optional - Maximum time in seconds to spend on a single host.
- **DS_PORTSCAN_SOURCE_PORT** (integer) - Optional - Configures the source port for the scan.
- **DS_CustomNmap** (string) - Optional - Overrides the Nmap command line.
- **DS_UDP_PROBES** (boolean) - Optional - Set to false to disable UDP service probes.
- **DS_FINGER_USERS** (boolean) - Optional - Set to false to disable finger service username harvesting.
- **DS_SNMP_SCAN** (boolean) - Optional - Set to false to disable the SNMP scanner.
- **DS_IDENTIFY_SERVICES** (boolean) - Optional - Set to false to disable the service identification phase.
- **DS_SMBUser** (string) - Optional - Username for SMB service information extraction.
- **DS_SMBPass** (string) - Optional - Password for the SMB user.

### Response
- **task_id** (string) - The ID of the task that can be monitored using the Pro task API.
```

--------------------------------

### Credential List Syntax Example

Source: https://docs.rapid7.com/metasploit/bruteforce-attacks

Demonstrates the required format for credential pairs, including blank usernames and multiple passwords per user.

```text

username
`<BLANK>` password
username password
username password1 password2
```

--------------------------------

### pro.import_data

Source: https://docs.rapid7.com/metasploit/pro-import-api

Starts a new import task with the supplied data.

```APIDOC
## pro.import_data

### Description
The pro.import_data method starts a new import task with the supplied data.

### Request Example
[ "pro.import_data", "<token>", "Project1", "<DATA>",
  {
  'blacklist_hosts' => '',
  'preserve_hosts' => false
  }
]

### Response
#### Success Response
- **task_id** (string) - The ID of the started import task.

#### Response Example
{ "task_id" => "109" }
```

--------------------------------

### pro.start_bruteforce

Source: https://docs.rapid7.com/metasploit/pro-feature-api

Launches a new Bruteforce task using the provided configuration options.

```APIDOC
## pro.start_bruteforce

### Description
The pro.start_bruteforce method is used to launch a new Bruteforce task. It takes a hash of options and returns a task ID that can be monitored using the Pro task API.

### Parameters
- **workspace** (string) - Required - The project name.
- **username** (string) - Optional - The Pro username to attribute the task to.
- **DS_WHITELIST_HOSTS** (string) - Required - Addresses and network ranges to test.
- **DS_BLACKLIST_HOSTS** (string) - Optional - Addresses and network ranges to exclude.
- **DS_STOP_ON_SUCCESS** (boolean) - Required - Whether to stop testing a service after cracking the first account.
- **DS_VERBOSE** (boolean) - Optional - Whether to show diagnostic information.
- **DS_INCLUDE_KNOWN** (boolean) - Required - Whether to use previously found credentials.
- **DS_DRY_RUN** (boolean) - Optional - Whether to skip the attack and only show what would be tested.
- **DS_BRUTEFORCE_SCOPE** (string) - Required - Bruteforce mode (quick, defaults, normal, deep, known, imported, 50k).
- **DS_BRUTEFORCE_SPEED** (string) - Required - Speed setting (Glacial, Slow, Stealthy, Normal, Fast, Turbo).
- **DS_BRUTEFORCE_SERVICES** (string) - Required - Protocols to test (e.g., SMB, SSH, HTTP).
- **DS_BRUTEFORCE_GETSESSION** (boolean) - Required - Whether to use cracked accounts to gain access.
- **DS_QUICKMODE_CREDS** (string) - Optional - Additional credentials to use.
- **DS_PAYLOAD_METHOD** (string) - Optional - Connection method (auto, reverse, bind).
- **DS_PAYLOAD_TYPE** (string) - Optional - Session type (meterpreter, shell).
- **DS_PAYLOAD_PORTS** (string) - Optional - Port range for connections.
- **DS_SMB_DOMAINS** (string) - Optional - Domains for NTLM protocols.
- **DS_PRESERVE_DOMAINS** (boolean) - Optional - Whether to use original domain names.
- **DS_CRED_FILE_IDS** (integer) - Optional - IDs of imported credential files.
- **DS_MAXGUESSESPERSERVICE** (integer) - Optional - Max authentication attempts per service.
- **DS_MAXMINUTESPERSERVICE** (integer) - Optional - Max time in minutes per service.
- **DS_MAXGUESSESPERUSER** (integer) - Optional - Max guesses per unique user account.
- **DS_MAXMINUTESOVERALL** (integer) - Optional - Max time in minutes for the entire task.
```

--------------------------------

### Request pro.revert_license

Source: https://docs.rapid7.com/metasploit/pro-license-api

Example request format for the pro.revert_license method.

```json
[ "pro.license", "<token>"]
```

--------------------------------

### Workspace Show Request Example

Source: https://docs.rapid7.com/metasploit/rest-api-endpoints

A sample URL for fetching workspace details for ID 1.

```text
https://localhost:3790/rest_api/v2/workspaces/1
```

--------------------------------

### pro.license

Source: https://docs.rapid7.com/metasploit/pro-license-api

Retrieves the current license details for the Metasploit Pro installation.

```APIDOC
## pro.license

### Description
The pro.license method returns a hash indicating the current Metasploit Pro license status and details.

### Request Example
[ "pro.license", "<token>"]

### Response
#### Success Response
- **result** (string) - Status of the operation
- **product_key** (string) - The product key
- **product_serial** (string) - The product serial number
- **product_type** (string) - The product type
- **product_version** (string) - The product version
- **product_revision** (string) - The product revision
- **registered** (boolean) - Registration status
- **activated** (boolean) - Activation status
- **expiration** (integer) - Expiration timestamp
- **person** (string) - Licensed person name
- **organization** (string) - Licensed organization name
- **email** (string) - Licensed email address
- **users** (integer) - Number of licensed users
- **hardware** (boolean) - Hardware binding status

#### Response Example
{
"result" => "success",
"product_key" => "XXXX-XXXX-XXXX-XXXX",
"product_serial" => "4dde9e80-c0b2cb0b-6d31b554",
"product_type" => "Metasploit Pro",
"product_version" => "4.11.0",
"product_revision" => "1",
"registered" => true,
"activated" => true,
"expiration" => 1325376000,
"person" => "Licensed Person",
"organization" => "Licensed Organization",
"email" => "bob_admin@example.org",
"users" => 2,
"hardware" => true
}
```

--------------------------------

### pro.start_import

Source: https://docs.rapid7.com/metasploit/pro-feature-api

Drives the import action within Metasploit Pro to ingest data from local files or configured Nexpose consoles.

```APIDOC
## pro.start_import

### Description
Imports data into a workspace. Requires a file path or Nexpose console configuration.

### Parameters
- **token** (string) - Required - Authentication token
- **options** (hash) - Required - Configuration hash
  - **workspace** (string) - Required - Project name
  - **username** (string) - Optional - User attribution
  - **DS_PATH** (string) - Optional - Server-local file path
  - **DS_BLACKLIST_HOSTS** (string) - Optional - Excluded addresses
  - **DS_PRESERVE_HOSTS** (boolean) - Optional - Prevent modifications to existing hosts
  - **DS_REMOVE_FILE** (boolean) - Optional - Delete file after import
  - **DS_ImportTags** (boolean) - Optional - Import tags
  - **DS_NEXPOSE_CONSOLE** (string) - Optional - Nexpose console name
  - **DS_NEXPOSE_SITE** (string) - Optional - Nexpose site name

### Request Example
[ "pro.start_import", "<token>", { "workspace" => "Project1", "DS_PATH" => "/tmp/nexpose.xml" } ]

### Response
- **task_id** (string) - The ID of the created task

### Response Example
{ "task_id" => "109" }
```

--------------------------------

### pro.import_file

Source: https://docs.rapid7.com/metasploit/pro-import-api

Starts a new import task with the supplied server-local path.

```APIDOC
## pro.import_file

### Description
The pro.import_file method starts a new import task with the supplied server-local path.

### Request Example
[ "pro.import_file", "<token>", "Project1", "/home/data/report.xml",
  {
  'blacklist_hosts' => '',
  'preserve_hosts' => false
  }
]

### Response
#### Success Response
- **task_id** (string) - The ID of the started import task.

#### Response Example
{ "task_id" => "109" }
```

--------------------------------

### GET /rest_api/v2/workspaces/:workspace_id/hosts/:host_id/sessions/:id

Source: https://docs.rapid7.com/metasploit/rest-api-endpoints

Returns a session by ID.

```APIDOC
## GET /rest_api/v2/workspaces/:workspace_id/hosts/:host_id/sessions/:id

### Description
Returns a session by ID.

### Method
GET

### Endpoint
/rest_api/v2/workspaces/:workspace_id/hosts/:host_id/sessions/:id

### Parameters
#### Path Parameters
- **workspace_id** - Required
- **host_id** - Required
- **id** - Required

### Response
#### Success Response (200)
- **id** - Session ID
- **host_id** - Host ID
- **stype** - Session type
- **via_exploit** - Exploit used
- **via_payload** - Payload used
- **desc** - Description
- **port** - Port
- **platform** - Platform
- **datastore** - Datastore
- **close_reason** - Reason for closing
- **local_id** - Local ID
- **module_run_id** - Module run ID
- **last_seen** - Last seen timestamp
- **campaign_id** - Campaign ID
- **opened_at** - Opened timestamp
- **closed_at** - Closed timestamp
```

--------------------------------

### Connect to the Database in msfconsole

Source: https://docs.rapid7.com/metasploit/managing-the-database

Use this command to establish a connection to your PostgreSQL instance. Replace the placeholder credentials and connection details with your specific database configuration.

```bash
msf > db_connect your_msfdb_user:your_msfdb_pswd@127.0.0.1:5432/msf_database
```

--------------------------------

### GET /rest_api/v2/workspaces

Source: https://docs.rapid7.com/metasploit/rest-api

Retrieves a list of all workspaces available on the Metasploit server.

```APIDOC
## GET /rest_api/v2/workspaces

### Description
Retrieves all workspaces and their details from the Metasploit server.

### Method
GET

### Endpoint
https://<Metasploit server>:3790/rest_api/v2/workspaces

### Response
#### Success Response (200)
- **id** (integer) - The unique identifier for the workspace
- **name** (string) - The name of the workspace
- **created_at** (string) - Timestamp of creation
- **updated_at** (string) - Timestamp of last update

#### Response Example
{
"id": 1,
"name": "default",
"boundary": null,
"description": null,
"owner_id": null,
"limit_to_network": false,
"created_at": "2015-04-07T11:51:23-07:00",
"updated_at": "2015-04-07T11:51:23-07:00"
}
```
Tokens:
Raw