Slashdot Mirror
Point, Click, Root.
An anonymous reader writes "The Metasploit Project just released version 2.2 of the Metasploit Framework. This release includes a VNC server payload that can be used with almost any of the Windows exploits. The scary thing about this payload is that the VNC server executes as a new thread in the exploited process; without writing any files to the disk drive. Is this the end as we know it for simple remote command shell exploits? A couple
articles have already mentioned this project."
What a sad day when even taking over someone's machine can be done point-and-click style. Seemed so much more personal when you just had a remote shell.
Microsoft should just post a big list of hacked machines, and turn everything wide open. After the script kiddie deluge is done, then we all go "phew! Wasn't that fun!" and go buy something else.
stuff |
... is a preview of the site's front page in a few days, courtesy of your friends at dhs.gov.
"A door is what a dog is perpetually on the wrong side of" - Ogden Nash
I was seriously getting bummed by the low quality of todays script kiddie exploits. With the metasploits project finally real security minded people, tinkerers (hackers) and just plain good programmers can have a common place to post their hard won knowledge for "1337" kids online to use.
...now this is a subject line you can get on board with.
That's like saying, "This started off as a Jello brand recipe for jello jigglers and has developed into a handy way to make the ultimate death ray"!
Un-news
Imagine a DMCA cluster of these!
I have recently obtained a patent on One-Click Cracking.
Our lawyers will be getting in touch with the MetaSploit group to discuss licensing options.
Thank you,
Jeff Bezos
Founder and CEO
amazon.com
P01NT CL1CK W00T!
An Indian-American Hindu committed to non-violent thought/speech/action alarmed by the global explosion of radical Islam
Has Microsoft released a timeline of when this toolkit will be integrated into VS.NET 2003?
Congratulations adventurer!
Your quest is at an end for you have reached the root of NetHack.
Within, the Wizard of MS RAS has no power, the Oracle 8i speaks with utmost clarity, and the stack overflow bugs do not bite.
This comment does not necessarily represent the views and opinions of the author.
visually impaired black hat hackers, we resent that this program is not designed for wider access. It's just another example of the systematic discrimination that we face as we try to gain root and own you all. We will eventually succeed. And when we do, we'll make all web pages look like bad!
It was going to be a pretty cool game.
Bleh!
This one also works. I find it easier to remember, since that's the word that always comes to mind when I see that color scheme.
When I am king, you will be first against the wall
With your opinion which is of no consequence at all
cuz, like, lurning all thoze command line thingz wuz totally hard, this wil maek me s0 much m0re 1337!!!!!!!one I totale r0x0rz n0w!!!!LOLOL
do not read this line twice.
Can you guys stop slashdoting the site? I want to download it just to show some co-workers a little "surprise"...
Funny you should say that...the name of Spoonm and HD Moore's talk at blackhat was "Metasploit: Hacking Like in the Movies"
Well, you can still fuck around with the user without actually having to manually do anything. If you can execute arbitrary code, then you can create a bot to do random things with the mouse or look for a running copy of Word and randomly type, "Help! I'm trapped in the word processor!" into the document the user is typing.
However, script kiddies probably won't know how to code something up like that without someone holding their hands.
Will the -devel branch of metasploit become the central hub for 0-day exploits?
Metasploit stable : This branch has only been tested to work on unpatched machines.
Metasploit -dev ($49.95 membership and password required): This branch has been tested to work against fully up to date and patched machines.
That'd be | |_|63r-|337
+++ATHZ 99:5:80
I think I'll incorporate this project in my spam-filter to execute a remote shut-down after receiving the first spam. After a 2nd spam I'll think of a more permanent way to opt-out. ;)
Privacy is terrorism.
Yes, that is what the legit people would use this tool for. But for every 1 person who is honestly using it for its "intended" purpose, there are 100 script kiddies using it to cause problems.
...And 1000 one who, like will use it to play joke on unsuspecting Buiness students from the across the campus :)
I live in Soviet Canuckistan you insensitive clod!
crap, where are my mod points!
;-)
You have to log in to see/use them.
Spine World
Back in the days of yore, my brother and his friends used to take pride in knowing a wide variety of tools and techniques for opening beer bottles. Then along came the twist off beer bottle cap, and my brother was heard to say: "Crap, now any idiot can open a beer.".
It happens to all of us, our hard won skills, honed to perfection over years of use, the knowledge and techniques that make us special and separate us from the common man, get packaged into a user friendly, idiot proof tool. It's called progress.
"I'm not impatient. I just hate waiting." - My Dad
Why?
So how well does windows run on a 486?
...these aren't my real teeth.