search + info before exploit

Guide

Metasploit is a power tool. Blind run on the first search hit is how you crash a shared lab service or miss that the module needs a specific TARGET ID.

Why it matters

The professional loop is search → info → show options → set → check → run. Reading info tells you reliability, required options, and whether the module even matches your version.

How-to

search type:exploit apache
use exploit/…/whatever
info
show options
set RHOSTS 10.10.10.50
set RPORT 8080
check          # when supported
run

• Prefer modules marked excellent/great when learning.
• Never spray exploits across a range you do not own.
• Log the module path + options in your notes for the report.