full-disclosure - Re: New open source Security Framework

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Thu, 6 Oct 2011 08:42:39 +1100
From: xD 0x41 <secn3t@...il.com>
To: Darren Martyn <d.martyn.fulldisclosure@...il.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: New open source Security Framework

Out of interest, I was considering asking - what is all your opinions on
using Metasploit (via RPC) as the "shell handler" in an exploitation
framework? I was considering writing a fork of Fimap that used one.

Well here, i can say, I have recoded theyre whole fingerprinter for rpc/smb
and it r0x. In windows, is worth doing 10x. Awesome handler for exploiting,
and the updated ones look even better... although, i am mainly using a cpp
fork of theyre rpc-smb fingerprint host-attack... very very good.


On 6 October 2011 01:18, Darren Martyn <d.martyn.fulldisclosure@...il.com>wrote:

> When I saw this I too thought "Insect". Though still, I dont recall Insect
> having an exploit editor or ANY way to add modules (insect used a Metasploit
> install IIRC), but it DOES remind me (scarily) of CANVAS. Might check it out
> later.
>
> Out of interest, I was considering asking - what is all your opinions on
> using Metasploit (via RPC) as the "shell handler" in an exploitation
> framework? I was considering writing a fork of Fimap that used one.
>
> On Wed, Oct 5, 2011 at 2:10 PM, Gage Bystrom <themadichib0d@...il.com>wrote:
>
>> I grab a bag of popcorn whenever Juan sends an email.
>>
>> On Wed, Oct 5, 2011 at 4:25 AM,  <Valdis.Kletnieks@...edu> wrote:
>> > On Wed, 05 Oct 2011 06:49:40 -0300, root said:
>> >> How can I earn money by migrating exploits?
>> >> You will inmediately recieve $2 (US Dollars) in your PayPal account for
>> >> each approved exploit.
>> >
>> > At $2 per pop, you're going to see a lot of exploits that look like they
>> were
>> > mass-migrated by a Perl script, or by an 11 year old, because that's the
>> only two
>> > ways it makes economic sense for somebody to work for that pay rate.
>> >
>> > Man, is it too early in the morning to make popcorn?
>> >
>> > _______________________________________________
>> > Full-Disclosure - We believe in it.
>> > Charter: http://lists.grok.org.uk/full-disclosure-charter.html
>> > Hosted and sponsored by Secunia - http://secunia.com/
>> >
>>
>> _______________________________________________
>> Full-Disclosure - We believe in it.
>> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
>> Hosted and sponsored by Secunia - http://secunia.com/
>>
>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/