- Alexander Kornbrust Oracle Security Blog - http://blog.red-database-security.com -

Metasploit 3.3 is out

Dieser Eintrag stammt von Alexander Kornbrust Am 17 Nov 2009 @ 20:52 In Tools, Exploit, Oracle Security, Allgemein | Kommentarfunktion deaktiviert

[1] Metasploit 3.3, the leading exploit framework is out. Here an extract from the [2] Metasploit blog:

“Oracle exploit support has been implemented through a tag-team effort between MC and Chris Gates, with assistance from Alexander Kornbrust. Oracle modules have been developed for exploiting TNS protocol stack and Web-based Oracle services, as well as post-authentication database-level privilege escalation flaws. ”

Version 3.3. ([3] release notes) is the largest known ruby application (375,000 lines of code) and comes with some new Oracle features

  • Support for the Oracle InstantClient Ruby driver as an exploit mixin
  • Extensive support for exploitation and post-exploitation tasks against Oracle databases

Have fun using Metasploit.

Dieser Artikel wurde ausgedruckt ab Alexander Kornbrust Oracle Security Blog: http://blog.red-database-security.com

URL zum Artikel: http://blog.red-database-security.com/2009/11/17/metasploit-33-is-out/

URLs in this post:
[1] Metasploit: http://www.metasploit.com
[2] Metasploit blog: http://blog.metasploit.com/2009/11/metasploit-framework-33-released.html
[3] release notes: http://www.metasploit.com/redmine/projects/framework/wiki/Release_Notes_33

Klicken hier zum Drucken.