2KKUU7ita

Figure 11-19:
Metasploit
Pro’s
graphical
interface
provides
broad security
testing
capabilities.
Chapter 11: Windows
Metasploit Pro provides you with the ability to import scanner findings (typically
XML files) from third-party vulnerability scanners such as Acunetix Web
Vulnerability Scanner, Nmap, and QualysGuard. Simply click the Analysis tab
and select Import. After the scan data is imported, you can click Vulnerabilities
(under Analysis) and see all the original vulnerability scanner findings. To
exploit one of the vulnerabilities (it’ll have to be a supported exploit), simply
click the finding under the Name column and you’ll be presented with a new
page that allows you to exploit the flaw, as shown in Figure 11-20.
Keep in mind that I’ve demonstrated only a fraction of what Metasploit can
do. I highly recommend you download it and familiarize yourself with it.
Numerous resources are available at www.metasploit.com/help. The
power of Metasploit is unbelievable all by itself. Combine it with the exploit
code that’s continually updated at Offensive Security’s Exploits Database
(www.exploit-db.com), and you have practically everything you need if
you choose to drill down to that level of exploitation.
223