[framework] Integration with other tools

Jerome Athias jerome.athias at free.fr
Tue Nov 27 14:22:48 CST 2007


Attached is a screenshot of a potential way to automatically select an 
exploit module based on an nmap banner

Joxean Koret a écrit :
> Hi Jerome,
>
> On mar, 2007-11-27 at 08:36 +0100, Jerome Athias wrote:
>   
>> PS: going further will let you think about automatically updating the 
>> needed ret address, based on the os fingerprinting, using another 
>> database, just before launching your exploit ;p
>>
>>     
>
> That's exactly what I'm searching for. I have reliable ways to identify
> the remote os and service pack/kernel version for some operating systems
> and also the vulnerable application version for some services.
>
> Many of these have their respective exploit(s) in the Metasploit
> repository but I can't find a way to correctly assign a list of modules
> associated with the vuln and the os+sp level/os level/kernel version to
> adjust the retaddress/specific os option, etc...
>
> Any tip?
>
> Regards,
> Joxean Koret
>
>   
-------------- next part --------------
A non-text attachment was scrubbed...
Name: msf-nmap.png
Type: image/png
Size: 254287 bytes
Desc: not available
Url : http://spool.metasploit.com/pipermail/framework/attachments/20071127/10444c51/attachment.png 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3253 bytes
Desc: S/MIME Cryptographic Signature
Url : http://spool.metasploit.com/pipermail/framework/attachments/20071127/10444c51/attachment.bin 


More information about the framework mailing list