Thinning Out the Framework

[btricha at gmail.com (Bryan Richardson)]

Thanks H.  I'll try out rcov.  At this point I can't be more specific about
the limited feature set I'll end up needing because the project is just
starting.  All I know at this point is that I want to use Metasploit and I
will have memory limitations, so I wanted to get a head start on the
'thinning' part of it.  In parallel to this I'll be determining exactly what
features are needed.  I am comfortable saying at this point that I will only
need a very limited set of exploits and a very limited number of payloads
(probably obvious... :).  If I do end up needing the Meterpreter payload it
will probably be for pivoting purposes only, so I'll want to see if I can
thin down the libraries required for Meterpreter as well.
Hope that helps at all.

Robin - I intend to document my travels through this process and will
provide documentation to the framework as practical.

--
Thanks!
Bryan

On Sun, Oct 4, 2009 at 9:17 AM, HD Moore <hdm at metasploit.com> wrote:

> On Sun, 2009-10-04 at 08:20 -0600, Bryan Richardson wrote:
> > I'm looking to use a few specific pieces of Metasploit for a
> > particular task where source code size is an issue.  Given that I only
> > need to use a small number of the features the Metasploit framework
> > offers, I'm wondering if it's possible for me to some how 'thin' out
> > the code to only include the bare minimum needed for me to complete my
> > task.  Are there any Ruby toolkits (profilers maybe?) out there that
> > you know of that would help me to identify exactly which pieces of
> > code are used as I execute the specific task in question?
>
> We offer a "light" version of both 3.2 and 3.3-dev from the downloads
> page, with a little more crunching this can be further reduced to under
> 1Mb as a tar.bz2.
>
> If you are more interested in the api than the modules/interfaces, use a
> tool like 'rcov' to figure out what libraries are called, and rebuild
> based on that. Separating out what libs are actually required is going
> to be difficult, since many libraries are demand-loaded when different
> events occurs (a new session, for example). Could you be more specific
> about what limited feature set you are interested in?
>
> -HD
>
> _______________________________________________
> https://mail.metasploit.com/mailman/listinfo/framework
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.metasploit.com/pipermail/framework/attachments/20091004/21456b7f/attachment.html>