> For the complete documentation index, see [llms.txt](https://cajac.gitbook.io/ctf-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cajac.gitbook.io/ctf-notes/enum/web-discovery/metasploit-http-modules.md).

# Metasploit HTTP Modules

The Metasploit framework has a number of [auxiliary scanner modules for HTTP](https://github.com/rapid7/metasploit-framework/tree/master/documentation/modules/auxiliary/scanner/http) such as:

* [auxiliary/scanner/http/dir\_listing](https://github.com/rapid7/metasploit-framework/blob/master/documentation/modules/auxiliary/scanner/http/dir_listing.md)\
  This module will connect to a provided range of web severs and determine if directory listings are enabled on them.
* [auxiliary/scanner/http/dir\_scanner](https://github.com/rapid7/metasploit-framework/blob/master/documentation/modules/auxiliary/scanner/http/dir_scanner.md)\
  This module scans one or more web servers for interesting directories that can be further explored.
* [auxiliary/scanner/http/files\_dir](https://github.com/rapid7/metasploit-framework/blob/master/documentation/modules/auxiliary/scanner/http/files_dir.md)\
  This module identifies the existence of interesting files in a given directory path.
* [auxiliary/scanner/http/http\_version](https://github.com/rapid7/metasploit-framework/blob/master/documentation/modules/auxiliary/scanner/http/http_version.md)\
  This module displays the version information about each system.
* [auxiliary/scanner/http/robots\_txt](https://github.com/rapid7/metasploit-framework/blob/master/documentation/modules/auxiliary/scanner/http/robots_txt.md)\
  This module will detect `robots.txt` files on web servers and analyze its content.

## Resources

Metasploit - Documentation: <https://docs.metasploit.com/>

Metasploit - Homepage: <https://www.metasploit.com/>

Metasploit - Wikipedia: <https://en.wikipedia.org/wiki/Metasploit>

Metasploit-Framework - Kali Tools: <https://www.kali.org/tools/metasploit-framework/>
