Metasploit 3.4.0 Hacking Framework Released

Good news if you're looking to test your security defenses - the Metasploit framework has updated to version 3.4.0.

You wouldn't use Metasploit for evil purposes, boys and girls. Would you?

More than 100 new exploits have been included compared to 3.3.0, and a slew of bug fixes have also gone into the release.

From Darknet:

This is the first version of Metasploit to have strong support for bruteforcing network protocols and gaining access with cracked credentials. A new mixin has been created that standardizes the options available to each of the brute force modules. This release includes support for brute forcing accounts over SSH, Telnet, MySQL, Postgres, SMB, DB2, and more, thanks to Tod Bearsdley and contributions from Thomas Ring.


Metasploit now has support for generating malicious JSP and WAR files along with exploits for Tomcat and JBoss that use these to gain remote access to misconfigured installations. A new mixin was creating compiling and signing Java applets on fly, courtesy of Nathan Keltner. Thanks to some excellent work by bannedit and Joshua Drake, command injection of a cmd.exe shell on Windows can be staged into a full Meterpreter shell using the new “sessions -u” syntax.

You can get all the details in the release notes.

Metasploit Framework 3.3 is here

Metasploit Project has released version 3.3 of the Metasploit Framework, including updated exploits for WIndows 7.

All told, v3.3 packs 446 exploits and hundred of payloads, more than enough for those seeking an automated attack platform. 180 bugs have been fixed since the last release.

There's no need to be a cyber-genius to use the Metasploit Framework, much to the consternation of security professionals who miss the days when significant technical proficiency was required to write and launch attacks.

With the Metasploit Framework, it's as easy as selecting and configuring your exploit and payload, finding a vulnerable target, encoding your payload to hide from intrusion detection systems, and launching your exploit.

Remember, you should be using this tool for research, teaching, and assessment purposes only. Running Metasploit against targets without permission can get you a visit from people wearing sunglasses and dark suits.

You've been warned.

Windows 7 / Vista Zero-day Vulnerability Reported

Various outlets are reporting that Windows 7 and Windows Vista contain a flaw in the Server Message Block 2 (SMB2) driver that could lead to a critical system error, more commonly known as the "Blue Screen of Death."


Since part of the C-I-A triangle includes Availability (in addition to Confidentiality and Integrity), this weakness in how SRV2.SYS deals with malformed SMB headers as part of the Negotiate Protocol Request function is essentially a denial of service vector.

Exploit code for this flaw has been added to the Metasploit Framework, although Microsoft maintains that they have received no reports of attacks or customer impacts.

Microsoft has quite a history when it comes to SMB vulnerabilities, and it will be interesting to see how long it takes Redmond to crank out a fix for this one.

Updated 9/9/09: Microsoft has re-released Security Advisory 975497 regarding the SMB vulnerability. Aside from snarking at us because the details were "irresponsibly reported", Microsoft wants us to know that Windows 7 RC is affected, but not Windows 7 RTM. Also, Windows Server 2008 R2, Windows XP, and Windows 2000 are not affected, according the the re-release - mainly because Microsoft didn't introduce SMB2 until after those products were already on the market.

Opportunistic Flu Virus

In light of the swine flu pandemic, many agencies have taken a fresh look at how the population is typically affected by flu outbreaks, and whether there are any specific factors that put someone at a higher risk of having a negative outcome should they be infected.

Chronic conditions, not surprisingly, significantly increase the risk when it comes to severity. This chart demonstrates a breakdown of chronic conditions by type among those aged 18-29.

We expect the elderly to struggle with viruses and illnesses that the younger population typically fights off without much difficulty, but what swine flu showed us is that when something new comes along, for which resistance has not yet been developed in the population at large, these chronic conditions can play a major factor.

The Opportunistic Flu Virus, via Effect Measure

Metasploit April Fools Joke

Good one!

Metasploit's Decloak v2 is back

You can use the Metasploit Decloak Engine to determine the real IP address of a user in new and interesting ways. One of the neat things about Decloak is that it gets through a user's proxy settings to hand you the true IP.

It works through most proxies, excluding Tor+Torbutton+Privoxy, but only if you have the Tor combo set up correctly.

The first version came out around 2006 and worked fine until there were some changes made to Flash and other coding, which led to an update being needed.

The site details how v2 adds functionality for iTunes, QuickTime, and Microsoft Office techniques, in addition to enhancements for Flash and Java. It also no longer uses Javascript.

Play around with v2 and let me know what you think. It's really difficult for a user to hide from you if you have this little engine on your side.