Metasploit mailing list archives

Adding an exploit


From: mmiller at hick.org (mmiller at hick.org)
Date: Sun, 1 Aug 2004 05:45:04 -0500

On Sun, Aug 01, 2004 at 04:59:54PM +0900, Jason Johnson wrote:
If by adding new exploits, you mean the ones on the site such as the
distcc_exec exploit, then all you have to do is copy the exploit file
(distcc_exec.pm) into you exploit directory.  Framework will add it to
your list of available exploits automatically.  To find the exploit
files, go to the exploits page
(http://www.metasploit.com/projects/Framework/exploits.html), click on
the exploit you want, and then right click and save-as the link next
to NAME (http://www.metasploit.com/projects/Framework/modules/exploits/distcc_exec.pm).
 Copy the file into your exploit directory, and voila!

The upcoming (2.2) release of metasploit also includes an updater that will
allow you to update your local copy of the framework to the latest release copy.
This means that any new exploits that are added over time will be made
available via the updater.  The web interface is also an option for
downloading new exploits as they become available, but it
will not allow for updating framework library components like the
updater will (I'm not aware of any plans to make this available at the
moment).

The updater tool is named 'msfupdate', and can be found in the root of the
framework directory in the upcoming release.



Current thread: