Re: Core Impact

From: Daniele Milan (milan.daniele_at_gmail.com)
Date: 06/24/05

  • Next message: Andres Molinetti: "Re: TFTP and XP_CMDSHELL - Weird - SOLVED"
    Date: Fri, 24 Jun 2005 10:52:32 +0000
    To: pen-test@securityfocus.com
    
    

    On 6/24/05, Daniel Miessler <daniel@dmiessler.com> wrote:
    > Actually, while I think Metasploit is an impressive framework and use
    > it often, it lacks a main feature that IMPACT has. Namely, IMPACT is
    > able to do something they call "pivoting". This allows a tester to
    > select an exploit in the GUI, launch it, and then upload the IMPACT
    > agent to the newly compromised system.

    I think you can come up with something similar using the Meterpreter
    framework you can find in Metasploit.
    The only difference here is that you don't have the agent ready to use,
    but you have to develop it (lots of fun!) ;)
    However IMPACT seems to be the most mature and feature
    loaded framework you can ask for nowadays.

    have a good day,
    Daniele Milan

    -- 
    In theory, there's no difference between theory and practice.
    But, in practice, there is.        (Jan L.A. van de Snepscheut)
    GPG key: http://tinybyte.altervista.org/tinybyte.asc
    

  • Next message: Andres Molinetti: "Re: TFTP and XP_CMDSHELL - Weird - SOLVED"

    Relevant Pages

    • [Full-disclosure] Metasploit Framework 3.0 RELEASED!
      ... March 27th, 2007 -- Metasploit is pleased to announce the immediate, ... free availability of the Metasploit Framework version 3.0 from ... port, execute a command, and many other tasks. ... Database support is provided via a set of plugins and a standard ...
      (Full-Disclosure)
    • Metasploit Framework 3.0 RELEASED!
      ... March 27th, 2007 -- Metasploit is pleased to announce the immediate, ... free availability of the Metasploit Framework version 3.0 from ... port, execute a command, and many other tasks. ... Database support is provided via a set of plugins and a standard ...
      (Pen-Test)
    • Metasploit Framework 3.0 RELEASED!
      ... March 27th, 2007 -- Metasploit is pleased to announce the immediate, ... free availability of the Metasploit Framework version 3.0 from ... port, execute a command, and many other tasks. ... Database support is provided via a set of plugins and a standard ...
      (Bugtraq)
    • Metasploit Framework 3.0 RELEASED!
      ... March 27th, 2007 -- Metasploit is pleased to announce the immediate, ... free availability of the Metasploit Framework version 3.0 from ... port, execute a command, and many other tasks. ... Database support is provided via a set of plugins and a standard ...
      (Vuln-Dev)
    • Re: Using windows application project on a mobile device
      ... Binary Serialization isn't supported out of the box by the .NET Compact ... If your application relies heavily upon this feature you may need ... present on the .NET Compact Framework (but won't affect how the resultant ...
      (microsoft.public.dotnet.framework.compactframework)