Metasploit 3.2 is out

Metasploit development team has announced the release of version 3.2 of the Metasploit Framework, the new version 3.2 includes exploit modules for recent Microsoft flaws, such as MS08-041, MS08-053, MS08-059, MS08-067, MS08-068, and many more. The module format has been changed in version 3.2. The Byakugan WinDBG extension developed by Pusscat has been integrated with this release, enabling exploit developers to quickly exploit new vulnerabilities using the best Win32 debugger available today.

For those who are not familiar with metasploit, let me introduce you to Metasploit.

Metasploit provides useful information to people who perform penetration testing, IDS signature development, and exploit research. It stores tested and known stable exploits that successfully works against specific targets: various releases of Windows, Linux, BSD, generic UNIX, and Mac OS. It also runs on many of those same platforms, and has even been seen on a Nokia N800 handheld.

The project was initiated to provide information on exploit techniques and to create a useful resource for exploit developers and security professionals. Metasploit is also seen as application integration with various security applications such as SQL ninja. Exploits can be tested either on target host, or via a chain of proxies, additionally, various browser hijacking routines will let you load malicious ActiveX controls (3rd party or developed by you or some that are bundled with Metasploit) to vulnerable Internet Explorer versions. One way or another, you will be able to gain a foothold in a vulnerable system.

The success of exploit depends on the payload chosen. For instance, if you select to bind a shell, Metasploit will open a console session and connect back to the host via the specified port number. Even if you don’t possess the deep programming knowledge to make full use of its exploit development capabilities, you’ll benefit from the work of others and stay current as new exploits come online and old ones are addressed by patches.

Metasploit can be downloaded from here

You may also like this

• No Related Post