Test de pénétration avec Metasploit Pro

Metasploit Pro is enterprise-grade software for security professionals who specialize in penetration testing and require an advanced solution for multi-level attacks that enables them to get deeper into networks more efficiently.


Building on the easy-to-use interface of Metasploit Express, it also includes support for Web application exploits, managing client-side campaigns against end users, VPN pivoting, and team collaboration.

 

Metasploit Pro enables users to quickly identify, assess, and exploit vulnerable web applications. Using VPN pivoting, you can run the NeXposeª vulnerability scanner through the compromised Web server to discover an exploitable vulnerability in a database that hosts confidential customer data and employee information. Your team members can then leverage the gained data to conduct social engineering in the form of a targeted phishing campaign, opening up new attack vectors on the internal network, which are immediately visible to the entire team. Finally, you generate executive and audit reports based on the corporate template to enable your organization to mitigate the attacks and remain compliant with Sarbanes Oxley, HIPAA, or PCI DSS.

 

Metasploit Pro enables teams of penetration testers to coordinate orchestrated attacks against target systems and for team leads to manage project access on a per-user basis. In addition, Metasploit Pro includes customizable reporting.

 

Metasploit Pro enables you to:

 

  • Complete penetration test assignments faster by automating repetitive tasks and leveraging multi-level attacks
  • Assess the security of Web applications, network and endpoint systems, as well as email users
  • Emulate realistic network attacks based on the leading Metasploit Framework with more than one million unique downloads in the past year
  • Test with the world's largest public database of quality assured exploits
  • Tunnel any traffic through compromised targets to pivot deeper into the network
  • Collaborate more effectively with team members in concerted network tests
  • Customize the content and template of executive, audit and technical reports

 

 

Metasploit Pro User Interface Screenshot