cкачать Since the last major release (3.3) over 100 new exploits have been added and over 200 bugs have been fixed. This is the first version of Metasploit to have strong support for bruteforcing network protocols and gaining access with cracked credentials. A new mixin has been created that standardizes the options available to each of the brute force modules. This release includes support for brute forcing accounts over SSH, Telnet, MySQL, Postgres, SMB, DB2, and more, thanks to Tod Beardsley and contributions from Thomas Ring. Metasploit now has support for generating malicious JSP and WAR files along with exploits for Tomcat and JBoss that use these to gain remote access to misconfigured installations. A new mixin was added that compiles and signs Java applets on fly, courtesy of Nathan Keltner. еще здесь можно скачать с торрента вмварный образ Metasploitable - виртуалку для тестов: если кто скачает и переложит на какой нить обменник было б класс ...