Blog Elements

Half Sized Blog Element (Single Author Style)

Half Sized Blog Element (Multi Author Style)

OpenVAS & Metasploit Integration – How to Use OpenVAS in Metasploit

2018-07-06/0 Comments/in Vulnerability Assessment/by Kellep Charles

Recently during an engagement, I was able to use OpenVAS in Metasploit to scan a host and conduct a test to see if the system was indeed exploitable. Here is how it was done below:

WordPress 4.9.7 Security and Maintenance Release

2018-07-05/0 Comments/in General Security/by Kellep Charles

Download WordPress 4.9.7 or venture over to Dashboard → Updates and click “Update Now.” Sites that support automatic background updates are already beginning to update automatically.

OpenVAS & Metasploit Integration – How to Use OpenVAS in Metasploit

2018-07-06/0 Comments/in Vulnerability Assessment/by Kellep Charles

Recently during an engagement, I was able to use OpenVAS in Metasploit to scan a host and conduct a test to see if the system was indeed exploitable. Here is how it was done below:

WordPress 4.9.7 Security and Maintenance Release

2018-07-05/0 Comments/in General Security/by Kellep Charles

Download WordPress 4.9.7 or venture over to Dashboard → Updates and click “Update Now.” Sites that support automatic background updates are already beginning to update automatically.

Full Sized Blog Element (Big Preview Pic)

OpenVAS & Metasploit Integration – How to Use OpenVAS in Metasploit

2018-07-06/0 Comments/in Vulnerability Assessment/by Kellep Charles

Recently during an engagement, I was able to use OpenVAS in Metasploit to scan a host and conduct a test to see if the system was indeed exploitable. Here is how it was done below:

Issue command msfconsole to open Metasploit console.
- msfconsole

To use the OpenVAS integration you need to load the OpenVAS module within msfconsole. Do this by running the command
- load openvas.

Start by connecting to the server using the command openvas_connect.
- openvas_connect username password 127.0.0.1 9390

To create a target to scan use the command openvas_target_create. If you want spaces in the name or comment then make sure you place quotations around them.
- openvas_target_create “Local Machine” 192.168.70.128 “My Local Machine”

Create a task by specifying a target and a configuration. Use the command openvas_config_list to get a list of configurations and the command openvas_target_list to get a list of targets.
- openvas_config_list
- openvas_task_create “Local Scan” “Scan My Local Machine” 0 1

Start the task with openvas_task_start and watch the progress using openvas_task_list.
- openvas_task_start 0
- openvas_task_list
- openvas_task_list

Once the scan is finished, the progress is -1, list the available reports using openvas_report_list.
- openvas_report_list

If this was helpful please let me know.

WordPress 4.9.7 Security and Maintenance Release

2018-07-05/0 Comments/in General Security/by Kellep Charles

WordPress 4.9.7 is now available. This is a security and maintenance release for all versions since WordPress 3.7. We strongly encourage you to update your sites immediately.

WordPress versions 4.9.6 and earlier are affected by a media issue that could potentially allow a user with certain capabilities to attempt to delete files outside the uploads directory.

Thank you to Slavco for reporting the original issue and Matt Barry for reporting related issues.

Seventeen other bugs were fixed in WordPress 4.9.7. Particularly of note were:

Taxonomy: Improve cache handling for term queries.
Posts, Post Types: Clear post password cookie when logging out.
Widgets: Allow basic HTML tags in sidebar descriptions on Widgets admin screen.
Community Events Dashboard: Always show the nearest WordCamp if one is coming up, even if there are multiple Meetups happening first.
Privacy: Make sure default privacy policy content does not cause a fatal error when flushing rewrite rules outside of the admin context.

Download WordPress 4.9.7 or venture over to Dashboard → Updates and click “Update Now.” Sites that support automatic background updates are already beginning to update automatically.

The previously scheduled 4.9.7 is now referred to as 4.9.8, and will follow the release schedule posted yesterday.

Thank you to everyone who contributed to WordPress 4.9.7: