Chapter 3

  1. From basic network recon to chain tasks, there are a lot of features that you can use. In Metasploit CE, many features are locked and are only available for the Metasploit Pro Edition.

  2. To use a custom SSL certificate, replace the default SSL certificate that comes with Metasploit with the web UI by going to <path/to/metasploit>/opt/metasploit/nginx/cert and replacing the files that are there with your own.

  3. The web interface is compatible with Google Chrome 10+, Mozilla Firefox 18+, Internet Explorer 10+, and Iceweasel 18+.

  1. Yes, it does. RESTful APIs are available across all editions of Metasploit products. Check out https://metasploit.help.rapid7.com/docs/standard-api-methods-reference to view the standard Metasploit API documentation.
  2. Yes, it does. You can check the custom reporting format and configure it accordingly in the Metasploit web interface itself. Check out the following link for more information, at https://metasploit.help.rapid7.com/docs/about-reports.