full-disclosure - Metasploit Framework 3.0 Beta 3 Released

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Mon, 30 Oct 2006 13:00:13 -0600
From: H D Moore <fdlist@...italoffense.net>
To: full-disclosure@...ts.grok.org.uk
Subject: Metasploit Framework 3.0 Beta 3 Released

The Metasploit Framework is an advanced open-source exploit development 
platform. The 3.0 tree represents a complete rewrite of the 2.0 codebase 
and provides a scalable and extensible framework for security tool 
development. The 3.0 Beta 3 release includes support for exploit 
automation[1], 802.11 wireless packet injection[2], and kernel-mode 
payloads[3].

Windows users are now presented with a RXVT console and an updated Cygwin 
environment, which greatly improves the usability of the 3.0 interface on 
the Windows platform. 

The Metasploit Web Interface is still in development, but this release 
includes a preview of what the end functionality will look like. The web 
interface provides a "webtop" interface for interacting with the 
framework and uses aynschronous javascript to provide live searching. A 
early version of Metasploit IDE is also included with the web interface.

Downloads for all platforms can be found here:
 - http://metasploit.com/projects/Framework/msf3/#download

The latest version can be pulled directly from Subversion:
 $ svn co https://metasploit.com/svn/framework3/trunk/

Unix users may need to install the openssl zlib and dl ruby modules for 
the Framework to load. If you are using Ubuntu you will need to run the 
following commands:

# apt-get install libzlib-ruby
# apt-get install libopenssl-ruby
# apt-get install libdl-ruby

Unix users who wish to try the new web interface will need to install 
the 'rubygems' package and the 'rails' gem. Please see 
www.rubyonrails.com for more information and platform-specific 
installation instructions.

Users of other distributions or Unix flavors may want to grab the latest 
version of ruby from www.ruby-lang.org and build it from source. We 
highly recommend using Ruby version 1.8.4 or newer.Windows users will 
need to exit out of any running Cygwin-based applications before running 
the installer or using the Framework. The old 3.0 installation should be 
uninstalled prior to installing and using this version.

The release packages include Subversion repository information allowing 
you to synchronize your Beta 3 installation with the live development 
tree. The Windows installer includes a "MSFUpdate" menu item that uses 
Subversion to download the latest updates.Unix users will need to install 
the Subversion client change into the framework directory and 
execute 'svn update'.

On Unix systems, Subversion will complain about the self-signed 
certificate in use at metasploit.com. Please verify that the fingerprint 
matches the one below before accepting it:

===
- Hostname: metasploit.com
- Valid: from Jun 3 06:56:22 2005 GMT until Mar 31 06:56:22 2007 GMT
- Issuer: Development The Metasploit Project San Antonio Texas US
- Fingerprint: 1f:a2:8e:ad:14:57:53:75:b7:ab:de:67:e8:fa:17:49:76:f2:ee:ad
===

Enjoy!

- The Metasploit Staff

1. http://tinyurl.com/yadb4p
2. http://www.eweek.com/article2/0,1895,2040914,00.asp
3. http://tinyurl.com/yx5q79

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/