From: Jacco (computerguy@citlink.net)
Date: Mon Dec 18 2006 - 07:57:59 EST
Hey, Jax
I dont want to be rude, but a small reminder that, altho it is possible to
use autopwn in metasploit, it is far from a penetration test, since it is
limited by the quantity and quality of exploits it carries, the scans it
performs are very limited, penetration testing is far more than ./autopwn,
to seriously test, one becomes knowledge of achitecture of the (white,
gray or black) box on the network(x86, x64, etc, what kind of adittional
hardware it carries and what kind of daemons and remote user interfaces are
running above the kernel layer, a complete discovery of open ports, to
gather such information through an automated system while you struggling
with the right install of the program
But to answer your question : Backtrack 2.0 BETA comes with a complete
metasploit 3 setup which works (also with autopwn) and is ready to use, just
take your time to find out how to install it to the harddrive and if it
doesnt install right : Download it again from the Metasploit site and
manually compile it, im sure it will also work for you .
Greetz
Jacco "Dash" Rorman
"Ad Astra Per Administratio Aspera"
----- Original Message -----
From: "Jax" <cybercorecentre@gmail.com>
To: <pen-test@securityfocus.com>
Sent: Sunday, December 17, 2006 2:56 AM
Subject: live distro where metasloit3 hdm works
> Hey!
>
> Guys I could use some tip which pen-testing distro supports fully the
> Automated Exploitation with metasploit 3.
>
> Metasploit 3 uses the ActiveRecord
> <http://wiki.rubyonrails.org/rails/pages/ActiveRecord> module (part of RoR
> <http://rubyonrails.org/>) to provide an object-oriented interface to an
> arbitrary database service. Database support is enabled by installing
> RubyGems <http://www.rubygems.org/>, ActiveRecord ("gem install
> activerecord"), and a database-specific driver ("gem install [ postgresql
> | sqlite3 | mysql | etc ]"). Once these components have been installed,
> you will need to load the appropriate plugin from the msfconsole interface
> for the database that you want to use. The completed plugins include
> db_postgres
> <http://metasploit.com/svn/framework3/trunk/plugins/db_postgres.rb>,
> db_sqlite3
> <http://metasploit.com/svn/framework3/trunk/plugins/db_sqlite3.rb>, and
> db_sqlite2
> <http://metasploit.com/svn/framework3/trunk/plugins/db_sqlite2.rb>.
>
>
> The best what I tried still backtrack, but postgres doesn't installed in
> that neither the required ruby packages, ruby gems, sqlite libraries which
> require to successfully use this feature. Even in my installed ubuntu
> system I experience difficulties to setup this perfectly. Any suggestions?
>
> Best Regards,
>
> JaX
>
> ------------------------------------------------------------------------
> This List Sponsored by: Cenzic
>
> Need to secure your web apps?
> Cenzic Hailstorm finds vulnerabilities fast.
> Click the link to buy it, try it or download Hailstorm for FREE.
> http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
> ------------------------------------------------------------------------
>
>
>
>
> --
> No virus found in this incoming message.
> Checked by AVG Free Edition.
> Version: 7.5.432 / Virus Database: 268.15.22/590 - Release Date:
> 12/16/2006 5:39 PM
>
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:57:28 EDT