Comments on: Inguma 0.0.6 Released for Download - Free Pen-testing Framework

By: James C

James C — Fri, 14 Mar 2008 21:30:53 +0000

@Pantagruel
thanks for the update

By: Pantagruel

Pantagruel — Fri, 14 Mar 2008 19:53:38 +0000

Inguma version 0.0.7.2 has been released. In this version new modules and exploits, fixed many, many, many bugs as well as
enhancing existing modules, such as the Oracle related stuff where added.

http://inguma.sourceforge.net/

By: eM3rC

eM3rC — Sun, 06 Jan 2008 22:27:34 +0000

Amazing program!

Thanks for the post!

By: CG

CG — Mon, 24 Dec 2007 21:32:57 +0000

“Once my boss asked me why we were paying for two commercial products when there was metasploit for free, I didn’t know the answer, really”

i’m a total metasploit fanboy but it just doesnt do everything that the commercial tools can do. You’re also paying for the new exploits with the commercial tools, whether that is worth 20-50k is really a business choice.

one really cool feature of canvas though, is return addresses for international targets, most people dont need it but if you have to do a pen test in brazil (Portuguese targets) you are going to be out of luck if you are relying on metasploit to get the job done.

By: CG

CG — Mon, 24 Dec 2007 07:27:50 +0000

I have a feeling Joxean might be able to answer any questions on inguma.

as far as dependencies, the only one that really seems to give people trouble is getting cx_oracle installed.

By: metafan

metafan — Mon, 24 Dec 2007 07:00:47 +0000

This tool is great, adding metasploit exploits it will replace other commercial high price low quality tools. It seems a potential replacement for them! Once my boss asked me why we were paying for two commercial products when there was metasploit for free, I didn’t know the answer, really. One of the reasons was the reports but I was able to quickly add reporting support to the free tools. I would donate to this project.
congratulations!

By: Sir Henry

Sir Henry — Sat, 22 Dec 2007 18:20:13 +0000

@Joxean

Thanks for the interest, but this is a proprietary project that a friend and I are working on for a consulting gig that we are doing. Should we branch out further in the future, I will let you know.

By: goodpeople

goodpeople — Fri, 21 Dec 2007 10:39:41 +0000

Haven’t had time to play with it yet. But starting tomorrow I have two weeks off. (christmas vacation, gawd, I love being a teacher)..

By: Joxean Koret

Joxean Koret — Thu, 20 Dec 2007 21:33:12 +0000

Hi cpj and Sir Henry,

Can I help you in your projects? And, BTW, what is the problem with the dependencies? Did I missed something?

Regards

By: Sir Henry

Sir Henry — Thu, 20 Dec 2007 16:56:28 +0000

So far I have only been looking at it as a reference to see how the modules are invoked and what can be done with said modules. My project is in the infancy stage and simply gathering requirements. Once we break through that stage, we will then start testing out different items to see how our project can be a “value-add” (I hate buzzwords, yet seem to use them more than I would like) for us.