Exploitation Decision Tree

You have service version + enumeration data →

  → Is there a known CVE?
      YES → searchsploit <service> <version>
              → Match found → Read the exploit. Understand it. Modify IPs. Run it manually.
              → No match → Check exploit-db.com, packetstormsecurity.com, GitHub
      NO  → Check for:
              - Default credentials (try before anything else)
              - Anonymous / guest access
              - Misconfigurations (writable dirs, etc.)

  → Manual exploit available?
      YES → Run it manually. Understand every step.
              → If it fails, check dependencies, target OS, exact version match
      NO  → Try searchsploit for Metasploit module

  → Metasploit module available?
      YES → Use it only if manual fails or time pressure exists (exam context = avoid MSF)
              use <module>
              set RHOSTS <TARGET-IP>
              set LHOST <YOUR-IP>
              check    # verify target is vulnerable before running
              run
      NO  → Try different service / vector. Re-enumerate.