Metasploit mailing list archives

New Automated BIRTHDATE feature for Metasploit Framework


From: tnagareshwar at gmail.com (Nagareshwar Talekar)
Date: Sat, 8 Oct 2005 14:46:39 +0530

Hi all,

*What is this ?*

This is new birth date feature for metasploit framework. Currently there is
no date ( vulnerability disclosure date ) information for exploits listed in
metasploit framework.

This new feature will automatically update date information for the
exploits. Once the date is updated for exploits you will be able to see it
through the "Show exploits" and "info <exploit name>" commands in the
MSFConsole.

*How and to whom it will be useful?*
This is very useful feature for everyone who is playing with exploits. Often
the pen testers or any one who involved in testing exploits wants to try out
recent exploits. As of now they need to manually go through the various
websites to check out the disclosure date for vulnerabilities. Now they can
see the vulnerability date corresponding to exploits in the msfconsole directly
and hence save their valuable time concentrating on the actual work


*How to enable this automatic birthdate feature for metasploit framework?*

Its quite simple. Just take the back up of the MSF framework and proceed.

You just have to replace following three files. ( Files are present in the
zip file )

a) $framework$\msfconsole

b) $framework$\lib\Msf\Module.pm

c) $framework$\lib\Msf\TextUI.pm

Once you replace this files, start msfconsole and type "help". You will see
new command "update" with its description.


Now just type "show exploits" , you will see one more field displaying
"Unknown" which is in fact birth date for exploits. In order to
automatically update this birth date

for all the exploits , type "update" at msfconsole . After that you may have
to restart msfconsole if any of exploits files date has been updated.

After restarting msfconsole , now type "show exploits" and you will see the
birth date for the exploits. Type "info <exploit name>" , you will see a new
field called "birthdate" displaying date for that exploit.


For more information on this feature , please refer to the attached document
which explains about working of this feature and many

more details...

Moore , I hope you will integrate this feature to MSF for next release.
Let me know if any of you have any problems , concerns regarding this.

Happy Hunting :)

Thanks all



--
With Regards
Nagareshwar
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.metasploit.com/pipermail/framework/attachments/20051008/12983503/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: msf_birthdate.zip
Type: application/zip
Size: 15396 bytes
Desc: not available
URL: <http://mail.metasploit.com/pipermail/framework/attachments/20051008/12983503/attachment.zip>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Automated BIRTHDATE for MSF.doc
Type: application/msword
Size: 33280 bytes
Desc: not available
URL: <http://mail.metasploit.com/pipermail/framework/attachments/20051008/12983503/attachment.doc>


Current thread: