Tuesday, November 17, 2009

Metasploit Framework 3.3 Released

HD Moore made a blog post this morning about the release of Metasploit 3.3.

Here are some of the more notable feature enhancements (paraphrased from here):
  1. 446 exploits, 216 auxiliary modules, and hundreds of payloads. 
  2. Windows payloads now support NX, DEP, IPv6, and the Windows 7 platform. 
  3. More than 180 bugs were fixed since the release of version 3.2.
  4. Metasploit database functionality is enabled by default if a driver can be found and RubyGems is installed.
  5. Oracle and MS-SQL support has been integrated into the framework including working exploits and brute force dictionary password guessing has been worked into login modules.
  6. The payload encoding library can now embed Metasploit payloads into arbitrary executables.
  7. 64-bit support has been added for Windows and Linux platforms.
  8. Select payloads work with auxiliary modules and the database to select the right syscall numbers (making shellcode more adaptive) for each particular operating system revision.
  9. There is now support for JSP payloads.
  10. A simple fuzzer API has been integrated as a mixin including sample fuzzing modules.
  11. Support for the DECT COM-ON-AIR driver has been integrated into Metasploit.
  12. The Meterpreter can now capture network traffic from the compromised system.
The list goes on and on. I would suggest that you read the blog post if you want a more detailed description of some of the more major enhancements.


0 comments:

Post a Comment