I was at the lone star ruby conference this weekend and saw a talk about "Rebuilding the metasploit framework". The developer was talking about how he'd been working on this 'metasploit' program since 2003 or so and had developed it in perl. They had just recently ported it from perl to ruby...hence the seminar..
Anyway, after he got done talking about the migration process he ran some demos. The first demo he pointed and clicked a few options and then promptly took over a windows 2003 server. The 2nd demo, he took over a windows 2003 server, but also included a payload of vnc that installed on the victim pc and setup a connection from the attacking pc. Also, the victim pc was logged out at the time, but that didn't matter since the payload also spawned a command shell that ran under the system user with the cursor blinking at c:\ . He also said that malware and anti-virus scanners wouldn't typically pick up these attacks and that lots of times, these attacks would run in a thread under the antivirus process. arrrgggghhhhh. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| ColdFusion 8 - Build next generation apps today, with easy PDF and Ajax features - download now http://download.macromedia.com/pub/labs/coldfusion/cf8_beta_whatsnew_052907.pdf Archive: http://www.houseoffusion.com/groups/CF-Community/message.cfm/messageid:242100 Subscription: http://www.houseoffusion.com/groups/CF-Community/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.5
