Automated exploitation in Metasploit
Recent versions of the Metasploit framework do not support the famous db_autopwn
plugin. The db_autopwn
plugin is used to attack the hosts and vulnerabilities stored in the database during a penetration test automatically, based on the match made with the existing Metasploit modules.
However, due to its removal from the recent versions, we are not able to use this feature. To be honest, db_autopwn
proves to be very handy while conducting a large penetration test and carrying out a quick test of various services with numerous exploits, one-by-one, automatically. So, how we can re-enable this feature in the latest version of the Metasploit framework? The answer to this question is by putting the db_autopwn
script in the plugins
directory.
Re-enabling db_autopwn
Let's see how we can re-enable this great plugin in Metasploit and carry out a quick exploitation using it:
Download the script from https://github.com/nipunjaswal/Metasploit/blob/master/db_autopwn.rb...