Home page logo
/

basics logo Security Basics mailing list archives

Re: Automated penetration test
From: Nikhil Wagholikar <visitnikhil () gmail com>
Date: Fri, 3 Apr 2009 09:30:01 +0530

Hello Valera,

You can have a look at 'Fast-Track 4.0' as a solution.

Description: Fast-Track is a python based open-source project aimed at
helping Penetration Testers in an effort to identify, exploit, and
further penetrate a network.

Pre-requisites: Metasploit 3, SQLite, PYMSSQL, FreeTDS, Pexpect,
ClientForms, Beautiful Soup, and Psycho.

More Info:
https://www.securestate.com/Pages/Fast-Track.aspx
http://www.darknet.org.uk/2009/02/fast-track-40-automated-penetration-testing-suite/

Best of Luck!!

---
Nikhil Wagholikar
Practice Lead | Security Assessment & Digital Forensics
Network Intelligence (I) Pvt. Ltd. [NII Consulting]
Web: http://www.niiconsulting.com/
Comprehensive Information Security Training
http://www.niiconsulting.com/services/education/Training%20Calendar.html


2009/4/1 >p3dRø< <p.valera () pucp edu pe>:


Hello,

I need to make an automated penetration test in a network.

I always find tutorials about one especific exploit, in metasploit framework,
for example. I need a tutorial for automated test with all the exploits as
possible just especifying the subnet, for example 192.168.1.0/24. I mean, is
there a program that could do this? :

./program -allexploits 192.168.1.0/24

or in few steps do that ? (text mode, web? )

The tool doesn\'t matter: backtrack, metasploit, but I need to launch the
automated penetration test as I mentioned.

Someone knows a good tutorial or link about that ?

Thanks in advance,
Pedro



------------------------------------------------------------------------
This list is sponsored by: InfoSec Institute

No time or budget for traveling to a training course in this fiscal year? Check out the online information security 
courses available at InfoSec Institute. More than a boring "talking head", train in our virtual labs for a total 
hands-on training experience. Get the certs you need: CEH, CPT, CEPT, CISA, CISSP, CISM

http://www.infosecinstitute.com/request_online_training.html
------------------------------------------------------------------------



------------------------------------------------------------------------
This list is sponsored by: InfoSec Institute

No time or budget for traveling to a training course in this fiscal year? Check out the online information security 
courses available at InfoSec Institute. More than a boring "talking head", train in our virtual labs for a total 
hands-on training experience. Get the certs you need: CEH, CPT, CEPT, CISA, CISSP, CISM

http://www.infosecinstitute.com/request_online_training.html
------------------------------------------------------------------------


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault