If you're a framework user, you can go to /path/to/metasploit-framework/scripts/resource to see the resource scripts that are available. ![]() The Metasploit Framework provides several resource scripts that have been contributed by the community. The power of resource scripts lie in their ability to leverage most of the capabilities that are available in Metasploit and Ruby, whether you are using them from the Metasploit console or from the Metasploit web interface. The simple answer is that you can't query data, refine your search results, or use Ruby with task chains. If you've been using task chains in Metasploit Pro, you're probably wondering why you can't use them to automate this scenario. You can build a resource script to automate these actions for you. For example, let's say that you want to find all the hosts in your workspace that match a certain criteria and you want to run a series of modules against them. ![]() Resource scripts enable you to do almost anything you can do in the Metasploit Framework in Metasploit Pro. However, a recent enhancement to Metasploit Pro now enables commercial users to run resource scripts directly from the web interface. Historically, Metasploit users have only been able to run resource scripts from msfconsole. ![]() You can create a resource script by chaining together a series of Metasploit console commands and by directly embedding Ruby to do things like call APIs, interact with objects in the database, and iterate actions. They contain a set of commands that are automatically and sequentially executed when you load the script in Metasploit. Conceptually, they're just like batch scripts. Resource scripts provide an easy way for you to automate repetitive tasks in Metasploit.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |