New and improved verion of VASTO is ready for action.
“VASTO is a Virtualization Asessment Toolkit, a collection of Metasploit modules meant to be used as a testing tool to perform penetration tests or security audit of virtualization solutions. It has been sponsored by Secure Network and includes contributions by fellow hackers. It has been sponsored by Secure Network and includes contributions by fellow hackers.“
Changes made in VASTO:
- Abiquo_guest_stealer.rb
Exploits a path traversal in Abiquo up to version 1.5 A path traversal exploits in Abiquo up to version 1.5
It has been tested under Metasploit 3.4.2 and Ubuntu Linux, It has been tested under Metasploit 3.4.2 and Ubuntu Linux, but should work (maybe with minimal modifications) under but should work (maybe with minimal modifications) under Windows or any platform supported by Metasploit. Windows or any platform supported by Metasploit.
The current version, 0.3, was released at Black Hat US 2010.
Modules currently implemented:
- abiquo_guest_stealer.rb – Abiquo_guest_stealer.rb
Exploits a path traversal in Abiquo up to version 1.5 A path traversal exploits in Abiquo up to version 1.5
- abiquo_poison.rb – Abiquo_poison.rb
Serves evil VM if a MITM is performed. Serves evil VM if a MITM is performed.
- eucalyptus_bouncer.rb – Eucalyptus_bouncer.rb
Turn Eucalyptus systems in proxy servers. Turn Eucalyptus systems in proxy servers.
- eucalyptus_poison.rb – Eucalyptus_poison.rb
Serves evil VM if a MITM is performed. Serves evil VM if a MITM is performed.
- vmware_guest_stealer.rb – Vmware_guest_stealer.rb
Exploits a path traversal in VMware products. products exploits a path traversal in VMware.
- vmware_login.rb – Vmware_login.rb
Brute forcing for VMware Brute forcing for VMware
- vmware_session_rider.rb – Vmware_session_rider.rb
Local proxy to ride stolen SOAPID sessions with VI Client Local proxy to ride stolen SOAPID sessions with VI Client
- vmware_sfcbd_exec.rb – Vmware_sfcbd_exec.rb
Command exec (authenticated) on Studio and Data Protection Command exec (authenticated) on Studio and Data Protection
- vmware_studio_upload.rb – Vmware_studio_upload.rb
Arbitrary file upload on Studio 2.0 beta Arbitrary file upload on Studio 2.0 beta
- vmware_updatemanager_traversal.rb – Vmware_updatemanager_traversal.rb
Jetty path traversal Jetty path traversal
- vmware_version.rb – Vmware_version.rb
Fingerprints VMware products Fingerprints VMware products
- vmware_vilurker.rb – Vmware_vilurker.rb
MITM code execution against VI Client MITM code execution against VI Client
- vmware_webaccess_portscan.rb – Vmware_webaccess_portscan.rb
Turn VMware WebAccess into a portscanner (or a proxy) VMware WebAccess turn into a port scanner (or a proxy)
- vmware_autopwn – Vmware_autopwn
Automatizes exploiting the updatemanager traversal to ride a session Automatizes exploiting the update manager to ring traversal session
- xen_login.rb – Xen_login.rb
Brute forcer for XEN server Brute forcer for XEN server
Video Tutorial of VASTO:
Download VASTO v0.3 here
Searches leading to this post:VASTO vmware, installation vasto metasploit, vasto metasploit, vasto tool
