I have found that (as with
the earlier code error that results when clicking on the Brute-Force option),
clicking the Add button at this point can cause another error. In order to add
custom vulnerabilities you must edit the audit files themselves with a text
editor, such as Notepad. This is recommended by experienced people only
as it deals with direct scripting.
Even with Pluto??™s code issue, I left it in because of its ability to add the
custom audit scripts. You can use the audit files to gain experience in scripting
and understand how these exploits work against a target.
Vulnerability Scanning 429
Lab 68: Vulnerability Assessment
Perform Vulnerability Assessment: Metasploit
Prerequisites: None
Countermeasures: Secure ACLs, Bastion servers/workstations
Description: The Metasploit Framework is an advanced open source
platform for developing, testing, and using exploit code. This project
initially started off as a portable network game and has evolved into a
powerful tool for penetration testing, exploit development, and vulnerability
research. Remember that all commands in Linux are case sensitive.
Procedure: Windows: Install, set parameters, execute, and review results.
Linux: Compile, set parameters, execute, and review results.
On Windows
Double-click on the framework-2.5.exe icon to start the installation of
Metasploit.
Install the Metasploit Framework Wizard with the default options. Metasploit
will now finish installing.
Pages:
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161