Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Pen-Test
[Top] [All Lists]

Re: live distro where metasloit3 hdm works

Subject: Re: live distro where metasloit3 hdm works
Date: Mon, 18 Dec 2006 06:57:59 -0600
Hey, Jax

I dont want to be rude, but a small reminder that, altho it is possible to use autopwn in metasploit, it is far from a penetration test, since it is limited by the quantity and quality of exploits it carries, the scans it performs are very limited, penetration testing is far more than ./autopwn, to seriously test, one becomes knowledge of achitecture of the (white, gray or black) box on the network(x86, x64, etc, what kind of adittional hardware it carries and what kind of daemons and remote user interfaces are running above the kernel layer, a complete discovery of open ports, to gather such information through an automated system while you struggling with the right install of the program

But to answer your question : Backtrack 2.0 BETA comes with a complete metasploit 3 setup which works (also with autopwn) and is ready to use, just take your time to find out how to install it to the harddrive and if it doesnt install right : Download it again from the Metasploit site and manually compile it, im sure it will also work for you .

Greetz

Jacco "Dash" Rorman

"Ad Astra Per Administratio Aspera"


----- Original Message ----- From: "Jax" <cybercorecentre@gmail.com>
To: <pen-test@securityfocus.com>
Sent: Sunday, December 17, 2006 2:56 AM
Subject: live distro where metasloit3 hdm works



Hey!

Guys I could use some tip which pen-testing distro supports fully the Automated Exploitation with metasploit 3.

Metasploit 3 uses the ActiveRecord <http://wiki.rubyonrails.org/rails/pages/ActiveRecord> module (part of RoR <http://rubyonrails.org/>) to provide an object-oriented interface to an arbitrary database service. Database support is enabled by installing RubyGems <http://www.rubygems.org/>, ActiveRecord ("gem install activerecord"), and a database-specific driver ("gem install [ postgresql | sqlite3 | mysql | etc ]"). Once these components have been installed, you will need to load the appropriate plugin from the msfconsole interface for the database that you want to use. The completed plugins include db_postgres <http://metasploit.com/svn/framework3/trunk/plugins/db_postgres.rb>, db_sqlite3 <http://metasploit.com/svn/framework3/trunk/plugins/db_sqlite3.rb>, and db_sqlite2 <http://metasploit.com/svn/framework3/trunk/plugins/db_sqlite2.rb>.


The best what I tried still backtrack, but postgres doesn't installed in that neither the required ruby packages, ruby gems, sqlite libraries which require to successfully use this feature. Even in my installed ubuntu system I experience difficulties to setup this perfectly. Any suggestions?


Best Regards,

JaX

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------




--
No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.5.432 / Virus Database: 268.15.22/590 - Release Date: 12/16/2006 5:39 PM



<Prev in Thread] Current Thread [Next in Thread>