BeyondTrust

Security in Context: The BeyondTrust Blog

Welcome to Security in Context

Bringing you news and commentary on solutions and strategies for protecting critical IT infrastructure in the context of your business.

Happy Secure New Year from eEye and Metasploit

Posted December 28, 2011    The eEye Research Team

Since we announced our initial Retina Community integration with Metasploit, we’ve received tremendous positive feedback, both on the integration itself, as well as for delivering a uniquely seamless penetration testing toolset as a community offering. As we look toward 2012, we want to continue on that path and help deliver a Secure New Year, courtesy of eEye and Metasploit.

For many of our customers and community users, automating their vulnerability management processes with Retina and Retina CS is just the first step. Taking a ‘roll up the sleeves’ approach, many choose to test the exploitability of various vulnerabilities as part of their validation processes. In short, this large base of users was the drive for our initial integration with penetration testing tools.

In 2005 eEye, along with our friends at Core Security, delivered one of the industry’s first (and still widely used) integrations between vulnerability management and exploitation frameworks – Retina and Core Impact, respectively.

As is often the case with commercial markets, open source and ‘freemium’ models often appear alongside. This was true for penetration testing as well. As the open source products in this area began to mature and gain adoption within our user community as well, again, we dedicated development resources to delivering integrations with these products as well.

Since our original integration with Metasploit, there have been significant changes to the free, open source version of the Metasploit project. Some are process-based (registration requirements and version distribution, for example) and some are engineering-based (underlying engine functionality of how third party organizations like eEye and security professionals can integrate with the engine).

One of the biggest changes was Metasploit’s move away from an XML-RPC based protocol for scripting the Metasploit engine. Our original integration was via the command line interface and also via XML-RPC which could be used for local and remote engine communication. The Metasploit team has since stopped supporting XML-RPC and instead has switched to a new MessagePack based communication format. An interesting choice, one that seemed to preclude open integrations with what was once a fairly popular open source project.

eEye is committed to our integration with Metasploit, as well as to ensuring there remains a community-based (aka “FREE”) offering for automated and integrated vulnerability management and penetration testing. In the spirit of this commitment, we’ve worked overtime to deliver a fully integrated offering, once again, with Metasploit and their new MessagePack-based interface.

Want Retina Community?  Go Get It!

Both our commercial and community offerings of Retina again have the same level of integration and capabilities with Metasploit as before. However, eEye R&D is not a “that’s good enough” type of organization. They went a step further and added some performance improvements that make the Retina integration with Metasploit lightning fast as well. (It’s worth noting that these integrations are also available with commercial offerings of both Retina and Metasploit as well.)

From the R&D team at eEye we want to wish the Metasploit team and users of our integrated platforms happy holidays and a secure new year for users everywhere, both commercial and community.

Tags:
, , ,

Leave a Reply

Additional articles

VMware Hardening Guidelines-img3

How to Audit VMware ESX and ESXi Servers Against the VMware Hardening Guidelines with Retina CS

Posted February 27, 2015    BeyondTrust Research Team

Retina CS Enterprise Vulnerability Management has included advanced VMware auditing capabilities for some time, including virtual machine discovery and scanning through a cloud connection, plus the ability to scan ESX and ESXi hosts using SSH. However, in response to recent security concerns associated with SSH, VMware has disabled SSH by default in its more recent…

Tags:
, , , ,
dave-shackleford-headshot

Privileged Passwords: The Bane of Security Professionals Everywhere

Posted February 19, 2015    Dave Shackleford

Passwords have been with us since ancient times. Known as “watchwords”, ancient Roman military guards would pass a wooden tablet with a daily secret word engraved from one shift to the next, with each guard position marking the tablet to indicate it had been received. The military has been using passwords, counter-passwords, and even sound…

Tags:
, , ,
Privileged Account Management Process

In Vulnerability Management, Process is King

Posted February 18, 2015    Morey Haber

You have a vulnerability scanner, but where’s your process? Most organizations are rightly concerned about possible vulnerabilities in their systems, applications, networked devices, and other digital assets and infrastructure components. Identifying vulnerabilities is indeed important, and most security professionals have some kind of scanning solution in place. But what is most essential to understand is…

Tags:
, , , , ,