The characteristic I am most excited most is the novel Post Exploitation support. I hinted at this novel module type inwards the 3.5.2 unloosen statement as well as alongside 3.6, to a greater extent than than twenty novel modules are available. Post modules are a new, to a greater extent than powerful, replacement for meterpreter scripts. Scripts were clearly tied to a unmarried platform: meterpreter for Windows. With modules it is much easier to abstract mutual tasks into libraries for whatsoever platform that tin give the axe break a session. For example, file operations are mutual across all platforms -- windows/meterpreter, windows/shell, linux/shell, etc. Post modules tin give the axe only include Post::File as well as induce got access to platform-agnostic methods for interacting alongside the file system. In the close future, this variety of abstraction volition move extended to Windows registry manipulation as well as service control.
Too much generality tin give the axe arrive hard to access OS-level features as well as when y'all actually demand to larn downwardly as well as muddy alongside a session, y'all withal can. Post modules induce got a Session object precisely equally meterpreter scripts did as well as y'all tin give the axe withal access all of the low-level methods available to it. That agency y'all tin give the axe purpose railgun for performing complex organization manipulation (ie. smartlocker) when necessary. Influenza A virus subtype H5N1 major produce goodness of Post modules is the mightiness to easily include other mixins from the framework. From a user's perspective, this agency to a greater extent than consistent reporting as well as selection treatment than are currently available alongside scripts. This likewise opens the door to local exploits for a diversity of platforms, including Windows, Linux, as well as fifty-fifty Cisco IOS through SSH as well as Telnet sessions.
Although post service modules are meant to supersede meterpreter scripts, scripts are non going away whatsoever fourth dimension soon. We empathize that many users withal rely on somebody scripts for their post-exploitation needs as well as porting all of them to the novel format volition induce got time. So spell nosotros volition move favoring module contributions over scripts, that doesn't hateful your somebody code is of a abrupt going to halt working.
This is an exciting release. As always, it is directly available from the
Metasploit Framework downloads page.
Share This :
comment 0 Comments
more_vert