Black Hat USA 2007 Briefings and Training
Caesars Palace, Las Vegas • July 28-29 (Weekend) & July 30-31 (Weekday)

Overview:

This course will provide attendees with an in-depth understanding of the 3.0 version of the Metasploit Framework. The Metasploit Framework is an advanced, open-source exploitation framework that is designed to aid in the research, development, and testing of exploits. The course itself is broken down into three tracks. The first track will deal with the introductory aspects of the framework from a user's perspective. This will give students a good introduction to what the framework is capable of. The second track will take things a step deeper by diving into the internals of the framework. Students will learn about the underlying APIs that the framework is built on and how they can be used to write custom extensions to the framework itself. The third and final track will show where the framework is going in the future by exposing students to some of its more powerful aspects, such as post-exploitation and automation. Students should expect to walk away feeling comfortable in their ability to use and extend the Metasploit Framework.

1. The Metasploit Framework: A User's Perspective
2. The Metasploit Framework: A Programmer's Perspective
3. The Metasploit Framework: An Expert's Perspective

Prerequisites:
Basic understanding of exploitation technology (buffer overflows, shellcode).

Moderate understanding of programming in any language (Ruby preferred).

Students must bring:

• 1 laptop running Windows, Linux, or MAC OS X
• An installation of the Ruby Interpreter

Matt Miller is a seasoned software engineer with over ten years of applied experience and is one of the core developers of the Metasploit Framework. Matt's professional development experience in the security field covers VPN technology, Host-based Instrusion Prevention, and many other topics. Matt is also a respected member of the security research community, having contributed a number of publications and tools that have helped to further the field. Matt is an editor for the Uninformed Journal, a free online journal that focuses on encouraging the sharing of technical knowledge.