BeyondTrust

Security In Context

Bringing you news and commentary on solutions and strategies for protecting your critical IT infrastructure.

Happy Secure New Year from eEye and Metasploit

Post by The eEye Research Team December 28, 2011

Since we announced our initial Retina Community integration with Metasploit, we’ve received tremendous positive feedback, both on the integration itself, as well as for delivering a uniquely seamless penetration testing toolset as a community offering. As we look toward 2012, we want to continue on that path and help deliver a Secure New Year, courtesy of eEye and Metasploit.

For many of our customers and community users, automating their vulnerability management processes with Retina and Retina CS is just the first step. Taking a ‘roll up the sleeves’ approach, many choose to test the exploitability of various vulnerabilities as part of their validation processes. In short, this large base of users was the drive for our initial integration with penetration testing tools.

In 2005 eEye, along with our friends at Core Security, delivered one of the industry’s first (and still widely used) integrations between vulnerability management and exploitation frameworks – Retina and Core Impact, respectively.

As is often the case with commercial markets, open source and ‘freemium’ models often appear alongside. This was true for penetration testing as well. As the open source products in this area began to mature and gain adoption within our user community as well, again, we dedicated development resources to delivering integrations with these products as well.

Since our original integration with Metasploit, there have been significant changes to the free, open source version of the Metasploit project. Some are process-based (registration requirements and version distribution, for example) and some are engineering-based (underlying engine functionality of how third party organizations like eEye and security professionals can integrate with the engine).

One of the biggest changes was Metasploit’s move away from an XML-RPC based protocol for scripting the Metasploit engine. Our original integration was via the command line interface and also via XML-RPC which could be used for local and remote engine communication. The Metasploit team has since stopped supporting XML-RPC and instead has switched to a new MessagePack based communication format. An interesting choice, one that seemed to preclude open integrations with what was once a fairly popular open source project.

eEye is committed to our integration with Metasploit, as well as to ensuring there remains a community-based (aka “FREE”) offering for automated and integrated vulnerability management and penetration testing. In the spirit of this commitment, we’ve worked overtime to deliver a fully integrated offering, once again, with Metasploit and their new MessagePack-based interface.

Want Retina Community?  Go Get It!

Both our commercial and community offerings of Retina again have the same level of integration and capabilities with Metasploit as before. However, eEye R&D is not a “that’s good enough” type of organization. They went a step further and added some performance improvements that make the Retina integration with Metasploit lightning fast as well. (It’s worth noting that these integrations are also available with commercial offerings of both Retina and Metasploit as well.)

From the R&D team at eEye we want to wish the Metasploit team and users of our integrated platforms happy holidays and a secure new year for users everywhere, both commercial and community.

Tags:
, , ,

Leave a Reply

Additional articles

smart rules manager for vulnerabilities - v2

A New Way of Looking at Vulnerabilities in Your Environment

Assets, users, vulnerabilities and exploits; all are common themes in my posts on BeyondInsight. With BeyondInsight v5.1, we unveiled a new way to view exploitable assets. Sure, most vulnerability management solutions link vulnerability data to exploit information, allowing tools like NeXpose and QualysGuard to list an asset, its vulnerabilities, and any related exploits. BeyondInsight does…

Post by Morey Haber April 23, 2014
Tags:
, , , , ,
smart rules manager for vulnerabilities

Staying on Top of the Latest Vulnerabilities with BeyondInsight v5.1

It’s no secret that dozens of new OS and application vulnerabilities are revealed every day. Staying on top of these new exposures normally requires paying for services or subscribing to multiple RSS feeds. BeyondInsight 5.1 provides customers with another option: a built-in, customizable vulnerability alerting system that delivers up-to-date information on the latest vulnerabilities in…

Post by Morey Haber April 21, 2014
Tags:
, , , , , ,
BI-Qualys-Connector-IMG1

Getting More Value from QualysGuard Vulnerability Data with BeyondInsight v5.1

If your vulnerability assessment scans can’t produce meaningful and actionable reports, performing a scan does no good for anyone. If you’ve read my other blog posts, you know I have no qualms about stating that BeyondTrust provides the best vulnerability reporting in the industry. Ask your favorite analyst and they’ll tend to agree. Of course,…

Post by Morey Haber April 18, 2014
Tags:
, , , , , , , ,