Re: live distro where metasloit3 hdm works

["Jacco" <computerguy () citlink net>]

Hey, Jax

I  dont want to be rude, but a small reminder that, altho it is possible to 
use autopwn in metasploit, it is far from a penetration test, since it is 
limited by the quantity and quality of exploits it carries, the scans it 
performs are very limited, penetration testing is far more than ./autopwn, 
to seriously test, one becomes  knowledge of achitecture of the  (white, 
gray or black) box on the network(x86, x64, etc, what kind of adittional 
hardware it carries and what kind of daemons and remote user interfaces are 
running above the kernel layer, a complete discovery of open ports, to 
gather such information through an automated system while you struggling 
with the right install of the program

But to answer your question : Backtrack 2.0 BETA comes with a complete 
metasploit 3 setup which works (also with autopwn) and is ready to use, just 
take your time to find out how to install it to the harddrive and if it 
doesnt install right : Download it again from the Metasploit site and 
manually compile it, im sure it will also work for you .

Greetz

Jacco "Dash" Rorman

"Ad Astra Per Administratio Aspera"


----- Original Message ----- 
From: "Jax" <cybercorecentre () gmail com>
To: <pen-test () securityfocus com>
Sent: Sunday, December 17, 2006 2:56 AM
Subject: live distro where metasloit3 hdm works


> Hey!
>
> Guys I could use some tip which pen-testing distro supports fully the 
> Automated Exploitation with metasploit 3.
>
> Metasploit 3 uses the ActiveRecord 
> <http://wiki.rubyonrails.org/rails/pages/ActiveRecord> module (part of RoR 
> <http://rubyonrails.org/>) to provide an object-oriented interface to an 
> arbitrary database service. Database support is enabled by installing 
> RubyGems <http://www.rubygems.org/>, ActiveRecord ("gem install 
> activerecord"), and a database-specific driver ("gem install [ postgresql 
> | sqlite3 | mysql | etc ]"). Once these components have been installed, 
> you will need to load the appropriate plugin from the msfconsole interface 
> for the database that you want to use. The completed plugins include 
> db_postgres 
> <http://metasploit.com/svn/framework3/trunk/plugins/db_postgres.rb>, 
> db_sqlite3 
> <http://metasploit.com/svn/framework3/trunk/plugins/db_sqlite3.rb>, and 
> db_sqlite2 
> <http://metasploit.com/svn/framework3/trunk/plugins/db_sqlite2.rb>.
>
>
> The best what I tried still backtrack, but postgres doesn't installed in 
> that neither the required ruby packages, ruby gems, sqlite libraries which 
> require to successfully use this feature. Even in my installed ubuntu 
> system I experience difficulties to setup this perfectly. Any suggestions?
>
> Best Regards,
>
> JaX
>
> ------------------------------------------------------------------------
> This List Sponsored by: Cenzic
>
> Need to secure your web apps?
> Cenzic Hailstorm finds vulnerabilities fast.
> Click the link to buy it, try it or download Hailstorm for FREE.
> http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
> ------------------------------------------------------------------------
>
>
>
>
> --
> No virus found in this incoming message.
> Checked by AVG Free Edition.
> Version: 7.5.432 / Virus Database: 268.15.22/590 - Release Date: 
> 12/16/2006 5:39 PM