Avast WEBforum

Other => General Topics => Topic started by: polonus on June 14, 2010, 11:31:13 PM

Title: How Metasploit can be used - see the vid!
Post by: polonus on June 14, 2010, 11:31:13 PM
Hi malware fighters,

Here's the link: http://darknet-consulting.com/video/vector2/meta101.wmv

pol
Title: Re: How Metasploit can be used - see the vid!
Post by: Gargamel360 on June 15, 2010, 12:15:08 AM
Well.........that was disturbing.
I have a sandwich I was going to eat, but I believe I have lost my appetite.
I can just picture some 15 year old pc whiz down the street from me playing with that.
Title: Re: How Metasploit can be used - see the vid!
Post by: polonus on June 15, 2010, 12:23:01 AM
Hi Gargamel360,

That is how "automatons" are being created and soon some security firm is going to hire these little "monsters" to pester their co-workers with their gained insights. I liked it better to work from experience in the wild, the read-ups of old guru's like F.Ravia, new guru's like Giorgio Maone and working my self-created apps, running the occasional Wireshark and Fiddler and analyzing "on the fly",

polonus
Title: Re: How Metasploit can be used - see the vid!
Post by: Gargamel360 on June 15, 2010, 12:31:29 AM
"The Better the Devil you Know", or something like that, then?
True enough.

You are quite the educator, responsible for at least 50 bookmarks I
have in the short time I've been here.  Thanks for the edu :)
Title: Re: How Metasploit can be used - see the vid!
Post by: polonus on June 15, 2010, 12:45:15 AM
Hi Gargamel360,

You are more than welcome, and in reverse thank you for the inspiration,
it is all a matter of becoming aware, as I found out,

Damian
Title: Re: How Metasploit can be used - see the vid!
Post by: nmb on June 15, 2010, 05:14:55 AM
I wanted something on metasploit. Thanks for the link sir pol. Now on my download list. Will see it later.

nmb
Title: Re: How Metasploit can be used - see the vid!
Post by: nmb on July 21, 2010, 04:11:21 PM
Metasploit Class Videos

Got what I needed. Have to watch it, still.

Interested? : http://www.irongeek.com/i.php?page=videos/metasploit-class

nmb
Title: Re: How Metasploit can be used - see the vid!
Post by: polonus on July 23, 2010, 12:54:05 AM
Hi murali,

Here is a particular site where you can pentest at heart's content: http://hackme.ntobjectives.com/
Work in relation with this: http://web-sniffer.net/

Damian
Title: Re: How Metasploit can be used - see the vid!
Post by: nmb on July 23, 2010, 05:00:41 AM
Here is a particular site where you can pentest at heart's content: http://hackme.ntobjectives.com/
Work in relation with this: http://web-sniffer.net/

Cool, Thanks. :)
Title: Re: How Metasploit can be used - see the vid!
Post by: PeaceLove on July 26, 2010, 08:44:34 PM
Yikes. Any chance you also have a video on how to protect yourself from this? lol. Although now I'm afraid to click on anything...

Where do you guys go to learn? Any books or websites you could recommend to somebody new like me? Thanks. I just finished getting some viruses/trojans off my mom's laptop and it really pissed me off that people can take advantage of me because I'm not a crazy tech savvy hacker. Been reading some books online, but they don't have much practical stuff so far.

Peace Love
Title: Re: How Metasploit can be used - see the vid!
Post by: polonus on July 26, 2010, 09:36:16 PM
Hi PeaceLove,

To be a malware fighter you first have to grow into an excellent searcher (a good searcher is an animal to reckon with both on the white side as the grey and black one)) (go to www.searchlores.org and learn from f.ravia's lessons, this guru died much, much too soon, but was a great inspiration and I was honored to have published on his site about cgi sec). Then see all the information you can find here and show some interest, learn to code or about code security (many web malware comes in through malcode javascript vectors e.g. via cross site scripting and iFrame hacks/abuse.)
To know how to protect, you should know how and what to protect against because we are up against a whole army of nowadays mainly cybercrime inspired evil malcreants, so these start out to read about software and bugs and exploits and the lower echelons use ready made toolkits to infect, the more apt can create specific tailored attacks that go under the radar altogether, they are dangerous polymorphists and obfuscators, these malcdreants are no beginners like script kiddies are. The people that try to cocktail and brew antidotes do that in labs with virtual machines disconnected from the Internet, with analysis for instance on wepawet and the use jsunpack inside a virtual browser with NoScript to block malcode script from spilling over to infect the researchers (do not do this unless an expert), some use the browser malzilla to detect malware redirects and script, they check online resources and they report malsites and malcode all sorts. If you are inspired enough and motivated you can do that or volunteer to be trained as a qualified malware eliminator at online bootcamps like geeks2go. Analyse, read, read, look here how we developed here over the years, what a qualified malware eliminator like essexboy is capable of doing, what Pondus does checking all the new malcode reported against VT (virustotal.com) etc,

polonus aka Damian (malware fighter)
Title: Re: How Metasploit can be used - see the vid!
Post by: PeaceLove on July 28, 2010, 07:27:12 AM
Thanks a lot for the help. I appreciate you taking your time to help me out! I'm sending some good karma vibes your way.