Metasploit Express is security software for security professionals in enterprises and government agencies who need to carry out penetration tests against their systems quickly and easily.
Metasploit Express adds a graphical user interface to the Metasploit Framework, the de-facto leader in pentesting tools, and automates many of the tasks that otherwise require custom scripting, such as smart brute forcing, evidence collection, and reporting.
With Metasploit Express, IT staff can carry out discovery, penetration testing, evidence collection and cleanup to verify system security and compliance in-between third-party audits. Metasploit Pro integrates with NeXpose vulnerability management solutions to deliver precise and actionable risk scoring. Registration required (no freemail accounts).
What is new in this release:
- This release marks the first major version change in five years. Please see the blog for more information.
- Several import parsers were rewritten to use Nokogiri for much faster processing of large import files.
- Adding to Metasploit's extensive payload support, Windows and Java Meterpreter now both support staging over http and Windows can use https. In a similar vein, POSIX Meterpreter is seeing some new development again. It still isn't perfect nor is it nearly as complete as the Windows version, but many features already work.
- Java applet signing is now done directly in ruby, removing the need for a JDK for generating self-signed certificates.
- The Linux installers now ship with ruby headers, making it possible to install native gems in the Metasploit ruby environment.
Limitations:
- Fully featured trial expires after 7 days
Comments not found