[prev in list] [next in list] [prev in thread] [next in thread] 

List:       metasploit-framework
Subject:    Re: [framework] get vulnerable software for pen testing
From:       "Akos Toth" <tothakosh () gmail ! com>
Date:       2008-10-17 11:36:31
Message-ID: 264301fc0810170436y7f64f0e1j6c0ffdd6bcdf7ad1 () mail ! gmail ! com
[Download RAW message or body]

Thank you guys, these will be useful to get started.
(and put together some test environment)

Akos

On Thu, Oct 16, 2008 at 9:46 PM, Andre Amorim <decouk@gmail.com> wrote:
> take a look at:
>
> https://www.securinfos.info/old-softwares-vulnerable.php
>
> ..as was said to you is nice to open metasploit modules folder and try
> to figure out how the away it's works. A good start point is with
> FTPd's ...
>
> Try to download this fuzzer here:
> http://seclists.org/vuln-dev/2006/May/0004.html
> And olly debug,
> http://www.ollydbg.de/
>
> Also help a lot get a nice Ruby tutorial just to be familiar with framework.
> [s]
> A.A.
>
>
>
> 2008/10/16 Dan Guido <dguido@gmail.com>:
>> Here's the repo everyone uses:
>> https://www.securinfos.info/old-softwares-vulnerable.php
>> Most (all?) are for Windows.
>>
>> There are a lot of software versions in there that match up directly
>> with existing Metasploit modules, but you should try writing a new one
>> and contributing it back :-).
>>
>> --
>> Dan Guido
>>
>>
>>
>> On Thu, Oct 16, 2008 at 1:55 PM, Akos Toth <tothakosh@gmail.com> wrote:
>>> Hi,
>>>
>>> my diploma work is related to Metasploit and I'd like to add 2-3
>>> demonstrations of successful exploitation. So far exploiting XP SP0
>>> SMB is all I have. I'm looking for  vulnerable software that can be
>>> exploited with Metasploit.
>>>
>>> Can you recommend an exploit for which it's easy to get the
>>> corresponding vulnerable application, or do you know of any repository
>>> for vulnerable software versions?
>>>
>>> Thanks for the tips
>>>
>>> Akos
>>> _______________________________________________
>>> http://spool.metasploit.com/mailman/listinfo/framework
>>>
>> _______________________________________________
>> http://spool.metasploit.com/mailman/listinfo/framework
>>
>
>
>
> --
> Andre Amorim
> GnuPG KEY: 2048R/3E10FF47
> Download:
> http://pgp.zdv.uni-mainz.de:11371/pks/lookup?op=get&search=0x7C3B77763E10FF47
>
_______________________________________________
http://spool.metasploit.com/mailman/listinfo/framework
[prev in list] [next in list] [prev in thread] [next in thread]