Metasploit Pro— the attacker’s playbook

Metasploit Pro helps you conduct penetration tests 45% faster, and with 1.2 new exploits added each day, Metasploit Pro helps you find your weaknesses faster than anyone else.

45% 1.2

Rapid7® Metasploit® Pro helps penetration testers conduct assessments more efficiently by accelerating common tasks, such as discovery, exploitation, bruteforcing and reporting, provides advanced evasion and post-exploitation methods, and efficiently managing the vast amounts of data generated in large assessments.

Test your defenses more efficiently with Metasploit Pro

Knowing your opponents’ moves helps you better prepare your defenses. Metasploit, backed by an open source community of 200,000 members, gives you that insight. It’s the most popular penetration testing solution on the planet. With an average of 1.2 exploits added each day, Metasploit allows you to find your weak point before a malicious attacker does.

Complete engagements 45% faster through higher productivity–Penetration testers need to use their valuable expertise efficiently. In a survey with more than 2,000 Metasploit users, Metasploit Pro users said they save 45% of time on average compared to using Metasploit Framework. Security professionals new to penetration testing will find it easier to become productive with Metasploit Pro than with open source alternatives.

Validate vulnerabilities to prioritize remediation–Vulnerability scanners can determine installed software and its vulnerabilities but not whether it poses a high risk in the context of your network. This can be dangerous as IT teams don’t know which vulnerabilities need to be remediated first.

Metasploit Pro closes the vulnerability validation loop by returning results to Nexpose, where exploitability of a vulnerability can be used to create reports and prioritize vulnerabilities for remediation.

| Rapid7.com Metasploit Pro Product Brief

Product B

rief

073014

Manage phishing awareness to reduce user risk–Users are often the weakest part of the security chain, exposing organizations to attacks—phishing has seen a rise in recent years. Metasploit Pro measures the effectiveness of security awareness trainings by running simulated phishing campaigns, helping to manage exposure to this common attack vector.

Metasploit Pro integrates with Rapid7 UserInsight to provide phishing risk in the context of a more comprehensive user risk, including network access, cloud service usage, and compromised credentials.

Leverage the Metasploit open source project and its leading exploit library–Rapid7 manages the Metasploit project, the largest collection of code-reviewed exploits, backed by a community of over 200,000 members. This gives Rapid7 unique insights in to the latest attacker methods and mindset.

Uncover weak and reused credentials–Credentials have become the #1 attack vector for attackers. With Metasploit Pro, you can efficiently test your network for weak and reused passwords.

Manage data in large assessments–Conducting an assessment in networks over 100 hosts can be challenging. Metasploit Pro scales to support thousands of hosts.

Evade leading defensive solutions–Create dynamic payloads to evade detection by anti-malware solutions. Metasploit Pro evades leading anti-virus solutions 90% of the time, with no solution detecting all options. Get past firewall and IPS using traffic-level evasion techniques.

Control compromised machines and take over the network–Control machines you have compromised with over 200 post-exploitation modules. Get local network access with VPN pivoting.

Automatically generate reports containing key findings–Writing reports is often the most frustrating part of the job and takes up to 30% of time on an assessment. Generate reports to show your findings and sort them by regulations such as PCI DSS and FISMA.

“Using hours efficiently is critical, and Metasploit Pro is a huge help on this. Time savings are the biggest reason for us to use Metasploit Pro.”

—Jim O’Gorman, President,

Offensive Security

| Rapid7.com Metasploit Pro Product Brief

Metasploit Pro can help penetration testers to: