Re: Scanning machines

[HD Moore <hdm () metasploit com>]

On 2/19/2010 4:49 AM, Timm M.Schneider wrote:
> Hello,
>
>
> i'm brand new at this so i need some help to get going.
> I scan my old Linux machine, there is openssh v1 running, so metasploit should 
> tell me at least one open session but it didin't all sessions are "0 
> sessions". So what i have done wrong?

Nothing wrong - just because is running SSH doesn't mean there is an
exploit for it. I don't believe we have any exploits for OpenSSH, as no
pre-auth code exec bug with reasonable requirements has been found in
the last 5+ years. If you want to see whether Metasploit has a module
for a given flaw, you can use the search command in the console, or the
web-based module browser at the web site:

http://www.metasploit.com/framework/search?text=ssh

-HD
_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework