Update Pentesting tools News 05-May-2011
Metasploit Framework 3.7.0 released!
v3.7.0 Release Notes
Metasploit 3.7 represents a complete overhaul of how sessions are tracked within the framework and associated with the backend database.
This release also significantly improves the staging process for the reverse_tcp stager and Meterpreter session initialization.
Shell sessions now hold their output in a ring buffer, which allows us to easily view session history - even if you don't have a database.
This overhaul increases performance in the presence of many sessions and allows for a larger number of concurrent incoming sessions in a more reliable manner.
The Metasploit Console can now comfortably handle hundreds of sessions, an especially important consideration when running large-scale social engineering engagements.
Several areas of database performance have seen significant improvements as well and importing large scan results is now up to four times faster.
Highlights & New Features
- Support for SMB signing, enabling pass-the-hash and stolen password attacks against Windows 2008 Server environments.
- The Microsoft SQL Server mixin (and all modules) now supports NTLM authentication.
- Data import backend has undergone a rewrite, speeding up most import tasks by a factor of four.
- OS information is now normalized to make fingerprinting more accurate and easier to deal with.
More details about this release can be found in the 3.7.0 Release Notes. Download the latest version only from Metasploit official WebSite
Enjoy, Jano
