Hello there,

I i've virtual machine that is running BackTrack4r2. I need to use the built-in tool Metaspolit in bt for assessing the security and vulnerability in websites

The prob is that i dont have any idea about the Metaspolit tool

I would appreciate any help in providing info about best senario to use to demo the functionality of this tool or any info about it

Thanks so much for the support

Through the power of a magical internet tool, dubbed, "Yahoo Search Engine" I was able to find results for you.

http://search.yahoo.com/search?p=met...UTF-8&fr=moz35

Dear szboardstretcher

thanks so much ,, i actually read some of those websites b4 posting here!!

i asked if it is possible to have some scenarios to demo the functionalities of the tool

thanks

Instead of using metasploit, have you thought about other ways to tackle the problem?

- What is your monitoring solution so that if you get cracked you know about it?
- What is you update/patching routine?
- Have you investigated the sites you're hosting for known exploits?
- Do you have code audits/reviews for hosted sites?
- Are you responsible for updating the sites or are others? And if others, how are updates enforced?
- What steps have you taken to harden the hosting machine? SELinux? chroot? Virtual Machines?
- Do you have a disaster recovery plan and does it work?

In my opinion, penetration testing is really only useful in the context of an overall security plan where you've evaluated how to stop attacks in the first place. In fact I would argue you can be highly successful at maintaining a secured environment without ever having to resort to penetration testing.

Moved: This thread is more suitable in Linux-Security and has been moved accordingly to help your thread/question get the exposure it deserves.

Metasploit is a great tool for pen testing web apps. Anyone who says they want to learn metasploit I always suggest they go through the metasploit unleashed class put up by offensive-security. (it's free) Metasploit Unleashed

nomb

dude that wat i was looking for exactly

thanks lots u've been great help

Vulnerability assessment and pen testing are two different things.

I recommend true vuln assessment tools such as Nikto or Nessus. Use those first, as they will show you any apparent holes to further exploit using pen test tools.

Yes they are. However he was directly asking about Metasploit regardless if he used the right terminology. But you are right and I do wish people would push the fact that there is a difference so thanks for that! Also, I really am starting to consider Metasploit more of an environment vs a tool. And the reason I say that is I can run Nikto, Nessus, DirBuster, etc all from within Metasploit via simple ruby / python scripts. Actually I think Nessus might be built-in now. IDK I use my own. I know neXpose is. Either way, while it has a great exploitation framework (which is what it is) that is one tool that I could agree could be considered an assessment tool as well.

nomb

I think I answered fairly. Also, Hangdog42 was going in a similar direction as I was. Within the first two sentences of the OP's post, I saw that he he didn't mention that he wanted to pen test. He didn't mention pen testing in his whole post yet he mentioned backtrack and Metasploit.

My response was meant to inform the OP that pen testing is usually within the latter stages of assessing a system/service and that there is a definitive difference between looking for vulnerabilities, shoring up the findings, and exploiting known vulnerabilities. In most cases, a system can be secured without resorting to pen testing. Whether the OP accepts the advice is up to him, but it is upon every reader to add anything they think is relevant.

Also, don't let Metasploit's modular nature fool you into thinking that Nessus/Nikto and similar tools are actually developed by the maintainers of Metasploit. They are separate tools that can be leveraged by the Metasploit framework though usage of scripts. Linkage via scripts doesn't necessarily mean products are thoroughly integrated (or even supported by the Metasploit project).

I didn't say you didn't answer fairly and in fact I thanked you for bringing that up since it is often over looked...

Yes I know I said I use my own scripts that I wrote.

nomb