The Metasploit team has spent the last two months focused on one of the least-visible, but most important pieces of the metasploit Framework; the session backend. Metasploit 3.7 represents a complete overhaul of how sessions sre tracked within the framework and associated with the backened database. This release also significantly improves the staging process for the reverse_tcp stager and Meterpreter session initialization. Shell sessions now hold their output in a ring buffer, which allows us to easily view session history — even if you dont have database.
This release also includes a long-awaited update to our SMB stack to enable signing.
Thanks to some great work by Alexandre Maloteaux, you can now perform pass-the-hash and stolen password attacks against Windows 2008. Alexandre also added NTLM authentication support to the Microsoft SQL Server driver within Metasploit.
In addition to the core library improvements, this release comes with 35 new remote exploits thanks in large part to our two newest full time developers, bannedit and sinner.
Download Metasploit Framework 3.7.0 from here: http://www.metasploit.com/download/
This release also includes a long-awaited update to our SMB stack to enable signing.
Thanks to some great work by Alexandre Maloteaux, you can now perform pass-the-hash and stolen password attacks against Windows 2008. Alexandre also added NTLM authentication support to the Microsoft SQL Server driver within Metasploit.
In addition to the core library improvements, this release comes with 35 new remote exploits thanks in large part to our two newest full time developers, bannedit and sinner.
Download Metasploit Framework 3.7.0 from here: http://www.metasploit.com/download/
0 comments:
Post a Comment