mzfconsole

Synopsis

Laden Metasploit-style framework REPL for fictional lab nets.

Syntax

mzfconsole
mzf
# inside REPL:
help | banner | version | exit | quit
search <kw>
use <path|#>
back
info | show info
show options|payloads|modules|nets|targets
set <OPT> <val> | unset <OPT>
check | run | exploit | rexploit
sessions [-l] | sessions -i <id>
jobs | loot | route | workspace [name] | spool … | db_hosts

Options / Flags

• Core REPL
• search — filter module paths/names/desc
• use — select by path or numeric index from show modules
• set / unset — RHOSTS, RPORT, PAYLOAD, SESSION, …
• check — dry-run port/vuln match
• run / exploit / rexploit — launch current module
• sessions -l / -i n — list / interact (demo meterpreter)
• show nets — LLC fictional inventory
• loot · route · workspace · spool · db_hosts

Examples

Copy-paste into LLC (backtick ` to toggle)

mzfconsole
search admin
use auxiliary/gather/labnet/admin_fingerprint
run
use exploit/labnet/admin/auth_bypass
set RHOSTS 10.13.37.30
check
run
sessions -l
use post/labnet/admin/dump_config
set SESSION 1
run
exit

Notes

• Aliases entering the REPL: mzfconsole, mzf, msfconsole. Bare msf prints a tip that msfconsole is not shipped — use mzf.
• Scope lock: only hosts under /nets. Real-internet exploits are blocked.
• Module families (catalog) — not separate manuals; use show modules / search in-console.
• auxiliary: scanner/discovery/udp_sweep, scanner/portscan/tcp, scanner/http/{title,dir_enum,ssl_version,http_methods}, scanner/ssh/ssh_version, scanner/mysql/mysql_version, scanner/modbus/find_unit_id, gather/labnet/admin_fingerprint
• exploit: labnet/http/laden_gw_rce, labnet/mysql/weak_login, labnet/admin/{auth_bypass,sqli_login,file_upload,idor_users,jwt_none,xss_stored,ssrf_debug,path_traversal,csrf_password,debug_console_rce,backup_expose,totp_bruteforce}, dmz/http/honeypot_trap, ot/modbus/register_write, wifi/http/captive_bypass
• post: labnet/gather/enum_jump, labnet/admin/{dump_config,hashdump}, labnet/pivot/route_add
• Demo flags look like LLZ{mzf_admin_…} — educational only.

See also