Re: Automated penetration test

[Nikhil Wagholikar <visitnikhil () gmail com>]

Hello Valera,

You can have a look at 'Fast-Track 4.0' as a solution.

Description: Fast-Track is a python based open-source project aimed at
helping Penetration Testers in an effort to identify, exploit, and
further penetrate a network.

Pre-requisites: Metasploit 3, SQLite, PYMSSQL, FreeTDS, Pexpect,
ClientForms, Beautiful Soup, and Psycho.

More Info:
https://www.securestate.com/Pages/Fast-Track.aspx
http://www.darknet.org.uk/2009/02/fast-track-40-automated-penetration-testing-suite/

Best of Luck!!

---
Nikhil Wagholikar
Practice Lead | Security Assessment & Digital Forensics
Network Intelligence (I) Pvt. Ltd. [NII Consulting]
Web: http://www.niiconsulting.com/
Comprehensive Information Security Training
http://www.niiconsulting.com/services/education/Training%20Calendar.html


2009/4/1 >p3dRø< <p.valera () pucp edu pe>:
> Hello,
>
> I need to make an automated penetration test in a network.
>
> I always find tutorials about one especific exploit, in metasploit framework,
> for example. I need a tutorial for automated test with all the exploits as
> possible just especifying the subnet, for example 192.168.1.0/24. I mean, is
> there a program that could do this? :
>
> ./program -allexploits 192.168.1.0/24
>
> or in few steps do that ? (text mode, web? )
>
> The tool doesn\'t matter: backtrack, metasploit, but I need to launch the
> automated penetration test as I mentioned.
>
> Someone knows a good tutorial or link about that ?
>
> Thanks in advance,
> Pedro
>
>
>
> ------------------------------------------------------------------------
> This list is sponsored by: InfoSec Institute
>
> No time or budget for traveling to a training course in this fiscal year? Check out the online information security 
> courses available at InfoSec Institute. More than a boring "talking head", train in our virtual labs for a total 
> hands-on training experience. Get the certs you need: CEH, CPT, CEPT, CISA, CISSP, CISM
>
> http://www.infosecinstitute.com/request_online_training.html
> ------------------------------------------------------------------------

------------------------------------------------------------------------
This list is sponsored by: InfoSec Institute

No time or budget for traveling to a training course in this fiscal year? Check out the online information security 
courses available at InfoSec Institute. More than a boring "talking head", train in our virtual labs for a total 
hands-on training experience. Get the certs you need: CEH, CPT, CEPT, CISA, CISSP, CISM

http://www.infosecinstitute.com/request_online_training.html
------------------------------------------------------------------------