Metasploit este o unealta open source de testare a vulnerabilitatii unui Server/PC. Are exploit-uri predefinite, si este o unealta de vis pentru orice ‘script-kiddie’.

Mai jos am pus o descriere in engleza.

The Metasploit Framework is a development platform for creating security tools and exploits. The framework is used by network security professionals to perform penetration tests, system administrators to verify patch installations, product vendors to perform regression testing, and security researchers world-wide. The framework is written in the Ruby programming language and includes components written in C and assembler.

Metasploit v3.3 il puteti gasi aici:

Windows – Metasploit-3.3.exe
Linux – Metasploit-3.3.tar.bz2

Detalii cu functionalitati: Metasploit Release Notes
Homepage: Metasploit.com

Da, a aparut si exploit de FreeBSD. De mult nu am mai vazut asa ceva, poate pentru ca nu prea e asa de folosit, si mai greu de configurat.
Ce face acest exploit?!

Pai ‘te face’ root, daca ai acces local la acel sistem.
Cum?
Pai daca gasesti vreo vulnerabilitate pe aplicatia web, sau ai acces ssh.
OFFtopic: i’m back.
Sursa: The Register