15 Years Later, Metasploit Still Manages to be a Menace

guest · Oct 23, 2019

15 Years Later, Metasploit Still Manages to be a Menace
A fresh look at the penetration testing tool Metasploit reveals the 15-year old hacking tool still has some tricks up its sleeves
October 23, 2019
https://threatpost.com/metasploit-still-a-menace/149448/

The popular penetration testing and hacking framework Metasploit may be getting long in the tooth, but it hasn’t lost its bite in the hands of bad actors. According to researchers, hackers are still using the tool and a highly effective technique called Shikata Ga Nai (Japanese for “nothing can be done”) to slip past modern day endpoint protections.

Stopping attacks that use this technique still remain a challenge, according to a fresh analysis by FireEye researchers Steve Miller, Evan Reese and Nick Carr posted Monday.

“Despite Metasploit’s over 15 year existence, there are still core techniques that go undetected, allowing malicious actors to evade detection,” researchers wrote.
Today, Metasploit is on its fifth version and billed by Rapid7 as “penetration testing software to help you act like the attacker.”
Metasploit, and especially Shikata Ga Nai, has also found a home with a cadre of bad guys.

“One of [Metasploits] core techniques is the Shikata Ga Nai (SGN) payload-encoding scheme,” FireEye wrote.
Click to expand...

FireEye: Shikata Ga Nai Encoder Still Going Strong

Log in or Sign up

15 Years Later, Metasploit Still Manages to be a Menace

guest Guest

Log in or Sign up

15 Years Later, Metasploit Still Manages to be a Menace

guest Guest

Useful Searches