Recognize-Security

Posted by Trancer on Mar 25 2009

Collected a bunch of useful guides for some new capabilities of the Metasploit Framework.
Some of the capabilities are post 3.2 version. I strongly recommend updating your version to the latest 3.3-dev snapshot.

– Using the WMAP Metasploit module for web application penetration testing:
WMAP (Metasploit Module).

– Restricting the db_autopwn command to specific ports and modules when mass exploiting:
Metasploit Mass Exploitation for Dummies.

– Exploiting the Token Kidnapping vulnerability for privilege escalation:
Token Passing with Incognito (Part 2).

– Using msfpayload to export exploits as executables and go under the AV radar:
Bypassing Anti-Virus with Metasploit (Video).

– Dumping Memory to extract Password Hashes:
Part 1, Part 2.

– Keylogging are now made easy:
Remote Keystroke Sniffing with Meterpreter.

– Keylogging Windows logon screen credentials:
Capturing Logon Credentials with Meterpreter.

Happy pwnage :-)

Categories: Metasploit

0 Comments | Comments RSS | TrackBack URL

---