Roadmap

Metasploit 3.3.4

14 days late (03/01/2010)

100%

0 closed (0%)   1 open (100%)

Metasploit 3.4

Due in 31 days (04/15/2010)

32%

72 closed (31%)   161 open (69%)

Related issues
Feature #152: Add SMB signing support to the SMB stack
Feature #181: Meterpreter-based discovery tools / port scanners
Feature #244: reload payloads with rexploit
Feature #267: Rex::Text.to_activex
Feature #303: Add auxliary modules for MITM tasks
Feature #305: Database support in msfcli
Feature #308: db_use (Scanner like exploit module launcher)
Feature #310: Priv extension support for dumping cached password entries
Feature #315: Exploit fragmentation for IPS evasion
Feature #319: Provide stats on the success likelihood of a given exploit
Feature #326: Add autoproxy detection to payloads
Feature #332: sort and use gathered usernames/hashes in aux modules
Feature #357: NTLM auth for MSSQL modules
Feature #385: All scanner modules should store their results in the database.
Feature #387: Local Exploits
Feature #388: Add Domain / Workgroup / Computer Detection for PSEXEC and other SMB modules
Feature #389: Install via Token / PTH functionality for Meterpreter
Feature #390: Arpscan for Meterpreter
Feature #391: Macterpreter, Nixterpreter, SQLterpreter
Feature #394: Upgrade Payload
Feature #395: Session automation for standard shells
Feature #403: Binary (nix/win) building of modules (not just exploits)
Feature #405: Windows Kernel Sysenter Hook Shellcode Mixin
Feature #406: Full Java Payload Support
Feature #407: Meterpreter Local Privlige Escalation Extension
Feature #409: Document the use of msfconsole.rc
Feature #411: Add netcat-like advanced features to CONNECT
Feature #417: Meterpreter 'mount' remote file system
Feature #420: Functional SMB file server required to implement some exploits
Feature #421: Utility to generate module templates for (exploit, auxiliary, payload, encoder, nop)
Feature #428: Meterpreter script to automatically exploit weak service permissions
Feature #439: Meterpreter-32 should be able to load a 64-bit copy of itself
Feature #440: DCERPC Enumeration modules should resolve UUIDs to known names
Feature #444: DNS Tunneling for Meterpreter and Multi/Handler
Feature #445: Standalone Meterpreter (non-staged)
Feature #455: Integrate SQLMap's UDF libraries and SQL routines
Feature #459: psexec executable signing for use against Windows Server
Feature #477: Allow global variables to affect db_autopwn
Feature #485: Support running under the jRuby interpreter
Feature #487: Start ratproxy when starting wmap.
Feature #498: back command should work like popd
Feature #499: Move mixins into the modules directory, allow exploits to derive from a base template
Feature #500: Handle code duplication between fileformat, browser, and smtp mixins
Feature #502: The msfgui interface is no longer supported
Feature #503: The msfweb interface is no longer supported
Feature #505: Meterpreter priv extension should have the features of cachedump
Feature #527: Add ability for MSFPayload to include Meterpreter scripts in build
Feature #528: SSL Strip for Meterpreter
Feature #562: AYBABTU popup module and post-exploit script
Feature #564: help command should take an argument
Feature #568: The metsvc should allow the service name and port to be modified by the user.
Feature #569: Import NeXpose rawxml via an XML SAX parser
Feature #588: HTTP based server for serving file format exploits
Feature #589: allow msfpayload functionality inside msfconsole
Feature #598: create some wuftpd exploits
Feature #603: Provide better wrapping in msfconsole
Feature #613: Create a standard 'msfupdate' script and add to the root of SVN tree
Feature #653: several auxillary modules should probably be exploits instead
Feature #654: Windows 'cmd' stagers required
Feature #655: create an exploit for CVE-2003-0027
Feature #664: The resource command should tab complete filenames
Feature #679: Session screenshot plugin should use threading
Feature #684: Egghunter Improvements
Feature #698: Detect and purge dead sessions
Feature #700: Meterpreter script to enumate USB storage registry entries
Feature #704: msfencode should be able to generate a .docxm or .xlsxm
Feature #705: msfencode input template for .docxm and/or .xlsxm
Feature #706: msfencode input template for .pdf
Feature #707: msfencode should be able to generate a .pdf
Feature #710: Expose meterpreter sessions as WebDAV service
Feature #711: Add support for 2 default HP accounts to auxiliary/admin/http/tomcat_manager.rb
Feature #712: Update the token hunter to work on sessions in parallel
Feature #715: Ability to install metasploit to an alternative directory (Linux)
Feature #718: Enumerate wireless interfaces and show nearby APs
Feature #726: DB2 Brute Forcer
Feature #729: postgres bruteforcer
Feature #730: Postgres SQL Query Module
Feature #738: enable creating a resource file from the commands executed since the start of the session
Feature #749: search local database support
Feature #750: generic 'db_import <filename>' command
Feature #752: Local "Port-forwarding"
Feature #755: Shadow Copy / Restore Point File reader
Feature #757: Standardize aux module names
Feature #759: Meterpreter User and Group List
Feature #760: Meterpreter Clipboard Access
Feature #761: Meterpreter Windows Service Manipulation
Feature #765: OpenOffice Basic equivalent to MS Office VBA Payloads
Feature #772: create an exploit or aux module to automate code exec on a tomcat manager instance
Feature #773: automate code execution on JBoss
Feature #774: add support for WAR format to msfencode
Feature #775: zip file format mixin
Feature #781: Sound and Video Recording for Meterpreter
Feature #782: Raw socket modules should use the capture mixin to send packets
Feature #788: Discovering Dual Stack Hosts
Feature #793: Logged on user NTLM hash dumping
Feature #808: Metaspoit's fork of Postgres-PR should use Rex::Socket
Feature #811: PostgreSQL enumerator
Feature #816: Create user enumeration modules for PostgreSQL
Feature #821: style policy for code in Metasploit
Feature #823: zlib channel compression in Meterpreter
Feature #838: Use ActiveRecord's automatic timestamps (created_at/updated_at)
Feature #954: Support UPnP and/or STUN
Feature #961: User specific scripts
Feature #1016: JSP/WAR payloads for Linux and other operating systems

Metasploit 3.5

Due in about 5 months (08/16/2010)

14%

1 closed (14%)   6 open (86%)

Related issues
Feature #595: statistics for browser_autopwn
Feature #661: Metepreter should have a config file for loading aliases
Feature #692: rubytidy / code consistent script
Feature #810: print a shell
Feature #959: Extend adobe_pdf_embedded_exe to work on multiple pdf viewers

Metasploit 3.6

Due in about 7 months (10/15/2010)

No issues for this version