Hey, Jax
I dont want to be rude, but a small reminder that, altho it is possible to
use autopwn in metasploit, it is far from a penetration test, since it is
limited by the quantity and quality of exploits it carries, the scans it
performs are very limited, penetration testing is far more than ./autopwn,
to seriously test, one becomes knowledge of achitecture of the (white,
gray or black) box on the network(x86, x64, etc, what kind of adittional
hardware it carries and what kind of daemons and remote user interfaces are
running above the kernel layer, a complete discovery of open ports, to
gather such information through an automated system while you struggling
with the right install of the program
But to answer your question : Backtrack 2.0 BETA comes with a complete
metasploit 3 setup which works (also with autopwn) and is ready to use, just
take your time to find out how to install it to the harddrive and if it
doesnt install right : Download it again from the Metasploit site and
manually compile it, im sure it will also work for you .
Greetz
Jacco "Dash" Rorman
"Ad Astra Per Administratio Aspera"
----- Original Message -----
From: "Jax" <cybercorecentre@gmail.com>
To: <pen-test@securityfocus.com>
Sent: Sunday, December 17, 2006 2:56 AM
Subject: live distro where metasloit3 hdm works
Hey!
Guys I could use some tip which pen-testing distro supports fully the
Automated Exploitation with metasploit 3.
Metasploit 3 uses the ActiveRecord
<http://wiki.rubyonrails.org/rails/pages/ActiveRecord> module (part of RoR
<http://rubyonrails.org/>) to provide an object-oriented interface to an
arbitrary database service. Database support is enabled by installing
RubyGems <http://www.rubygems.org/>, ActiveRecord ("gem install
activerecord"), and a database-specific driver ("gem install [ postgresql
| sqlite3 | mysql | etc ]"). Once these components have been installed,
you will need to load the appropriate plugin from the msfconsole interface
for the database that you want to use. The completed plugins include
db_postgres
<http://metasploit.com/svn/framework3/trunk/plugins/db_postgres.rb>,
db_sqlite3
<http://metasploit.com/svn/framework3/trunk/plugins/db_sqlite3.rb>, and
db_sqlite2
<http://metasploit.com/svn/framework3/trunk/plugins/db_sqlite2.rb>.
The best what I tried still backtrack, but postgres doesn't installed in
that neither the required ruby packages, ruby gems, sqlite libraries which
require to successfully use this feature. Even in my installed ubuntu
system I experience difficulties to setup this perfectly. Any suggestions?
Best Regards,
JaX
------------------------------------------------------------------------
This List Sponsored by: Cenzic
Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------
--
No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.5.432 / Virus Database: 268.15.22/590 - Release Date:
12/16/2006 5:39 PM
|