OpenVAS & Metasploit Integration - How to Use OpenVAS in Metasploit
Recently during an engagement, I was able to use OpenVAS in Metasploit to scan a host and conduct a test to see if the system was indeed exploitable. Here is how it was done below:
Using Metasploit to Conduct NMAP Scans
Using Metasploit and nmap together as been a useful technique for me during some of my engagements. Below are the steps I take to implement that task. Start metasploit by issuing the following command: msfconsole Verify the status of the database by issuing the following command: db_status Run NMAP from inside msfconsole and save the […]
Metaspolit – msfconsole help command output
msf > help Core Commands ============= Command Description ------- ----------- ? Help menu banner Display an awesome metasploit banner cd Change the current working directory color Toggle color connect Communicate with a host exit Exit the console get Gets the value of a context-specific variable getg Gets the value of a global variable grep Grep […]
DoD Cyber Crime Conference 2011
SANS is pleased to announce that we've partnered with DoD Cyber Crime Conference 2011 to offer SANS two-day Metasploit Kung Fu for Enterprise Pen Testing course as part of the pre-conference training January 21 - 24, 2011 in Atlanta, GA.
Metasploit Pro Webcast with HD Moore - Recording Now Available for On Demand Viewing
Recently, Metasploit founder and Rapid7 CSO, HD Moore, conducted a live walk through of Metasploit Pro, the new commercial penetration testing tool based on the open source Metasploit Framework.
Metasploit Pro - Now Available - Free Trial & Webcast with HD Moore
Metasploit Pro is designed for security professionals in enterprises, government agencies and consulting firms who need to make network security testing more efficient in order to reduce costs. Unlike alternative products, Metasploit Pro improves the efficiency of penetration testers by providing unrestricted remote network access, and by enabling teams to collaborate efficiently. Metasploit Pro exceeds the functionality of Metasploit Express™ with support for security testing of custom Web applications, managing client-side campaigns against end-users, and additional evasion features. And, effective immediately, Metasploit Pro is available for trial and purchase.