Framework Digest, Vol 19, Issue 1

[p1n6w3n at gmail.com (Ping Gwen)]

Definately use Metasploits on-line framework support - the book "Metasploit
Toolkit for Penetration Testing" was not all-inclusive 2 years ago leaving
out many of the features available at that time.

On Tue, Aug 4, 2009 at 2:00 PM, <framework-request at spool.metasploit.com>wrote:

> Send Framework mailing list submissions to
>        framework at spool.metasploit.com
>
> To subscribe or unsubscribe via the World Wide Web, visit
>        https://mail.metasploit.com/mailman/listinfo/framework
> or, via email, send a message with subject or body 'help' to
>        framework-request at spool.metasploit.com
>
> You can reach the person managing the list at
>        framework-owner at spool.metasploit.com
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of Framework digest..."
>
>
> Today's Topics:
>
>   1. Is the Metasploit book still up-to-date? (Ben Greenfield)
>   2. Re: Is the Metasploit book still up-to-date? (HD Moore)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Mon, 3 Aug 2009 16:49:13 -0400
> From: Ben Greenfield <bcg at struxural.com>
> To: framework at spool.metasploit.com
> Subject: [framework] Is the Metasploit book still up-to-date?
> Message-ID:
>        <83ff70350908031349j5b123277v63c2ba39ec2f705e at mail.gmail.com>
> Content-Type: text/plain; charset=ISO-8859-1
>
> I'm looking for a really thorough guide to the framework.  I'm not a
> total newb user, as I would say I probably use metasploit 5 to 6 times
> a week at my job, I read the mailing list, and a couple of blogs (Dark
> Operator's is soooo interesting), and try to look at the code to
> understand it better.
>
> All that said, I think I'm just a novice user.  I barely know how to
> use msfencode or msfpayload, and I'd say that 99.99% of my time is
> spent in msfconsole.
>
> I'm looking for a book / guide / documentation / recommendation /
> whatever to help me get out of the novice stage and into the
> intermediate stage so I can start using the frameworks potential more.
>
> I know that Amazon lists a book (Metasploit Toolkit for Penetration
> Testing, Exploit Development, and Vulnerability Research (Paperback),
> but it's from 2007.  Has anyone read the book?  Would you recommend
> it, or do you recommend the official documentation instead?
>
> I'm also curious if people knew Ruby before picking up Metasploit.  Do
> you think I'm better server with a book on Ruby and the Metasploit
> documentation?  I know some Ruby, but I'm not so comfortable that it's
> the language I go to if I need to do something quickly.
>
> Thanks in advance, and thanks for the hard work that everyone puts
> into the framework,
>
>
> ------------------------------
>
> Message: 2
> Date: Mon, 03 Aug 2009 22:00:51 -0500
> From: "HD Moore" <hdm at metasploit.com>
> To: framework at spool.metasploit.com
> Subject: Re: [framework] Is the Metasploit book still up-to-date?
> Message-ID: <op.ux4anps4drfu7t at localhost>
> Content-Type: text/plain; charset=us-ascii; format=flowed; delsp=yes
>
> On Mon, 03 Aug 2009 15:49:13 -0500, Ben Greenfield <bcg at struxural.com>
> wrote:
>
> > I'm looking for a really thorough guide to the framework.
> [..]
> > I'm looking for a book / guide / documentation / recommendation /
> > whatever to help me get out of the novice stage and into the
> > intermediate stage so I can start using the frameworks potential more.
>
> The best bet is:
> http://metasploit.com/framework/support/
>
> > I know that Amazon lists a book (Metasploit Toolkit for Penetration
> > Testing, Exploit Development, and Vulnerability Research (Paperback),
> > but it's from 2007.  Has anyone read the book?  Would you recommend
> > it, or do you recommend the official documentation instead?
>
> Unfortunately even when these books were published, they were already out
> of date. Until the new Offensive Security coursebook comes out[1], the
> best bet is the official documentation and wikibooks articles.
>
> > I'm also curious if people knew Ruby before picking up Metasploit.  Do
> > you think I'm better server with a book on Ruby and the Metasploit
> > documentation?  I know some Ruby, but I'm not so comfortable that it's
> > the language I go to if I need to do something quickly.
>
> A great book is the Ruby PickAxe (v1)[2]
>
> -HD
>
>
> 1.
>
> http://www.offensive-security.com/blog/offsec/metasploit-unleashed-mastering-the-framework/
> 2. http://whytheluckystiff.net/ruby/pickaxe/
>
>
> ------------------------------
>
> _______________________________________________
> Framework mailing list
> Framework at spool.metasploit.com
> https://mail.metasploit.com/mailman/listinfo/framework
>
>
> End of Framework Digest, Vol 19, Issue 1
> ****************************************
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.metasploit.com/pipermail/framework/attachments/20090804/2ebb1405/attachment.html>