Frameworks

[BowserIsUltimate]

Okay, because I was told to do so, I am posting about frameworks. Of course I have no idea what they are, if I did I wouldn't be posting this. Apparently my friend told me that a framework isn't really a framework, which made me confused. So there's three questions I need answered:
1. What actually is a framework?
2. Where can I get one?
And lastly,
3. How do they work?

And a smilie to close the post.

[ebrizzlez]

Hey! You said a framework, was well.. a framework! Which, technically, and logically, that hardly makes sense. Wikipedia says:

A framework can be considered as the processes and technologies used to solve a complex issue. It is the skeleton upon which various objects are integrated for a given solution.

And, well.... a good framework to learn off of is Metasploit:
Wikipedia says~

The Metasploit Project is an open source computer security project which provides information about security vulnerabilities and aids in penetration testing and IDS signature development. Its most well-known sub-project is the Metasploit Framework, a tool for developing and executing exploit code against a remote target machine. Other important sub-projects include the Opcode Database, shellcode archive, and security research.

You can find Metasploit @

Code: Select all

www.metasploit.com

Another good framework would be :

Code: Select all

http://www.securityforest.com/wiki/index.php/Exploitation_Framework

I recommend using the Security Forest framework, but you can learn a bit from Metasploit.

Also check out

Code: Select all

www.milw0rm.com

for more information on exploits. A basic knownlege of exploits is good when using frameworks, so you can know what your doing. If anyone else knows somthing I missed out, please post more info.

Edited by NerdzOnCrack: Put your link into

Code: Select all

 balise please.[/color]

[CommonStray]

also check come of the other exploit and framework threads on the boards

[Lyecdevf]

Of course I have no idea what they are, if I did I wouldn't be posting this.

You could also use google and do a search for "framework & hacking." If you want to download metasploit framework 3.0 here is the link:


http://framework.metasploit.com/