Metasplopit Checks about neet

[JonnyHightower]

Good questions. No, neet doesn't automatically exploit everything it finds vulnerable. It used to have automatic exploitation turned on years ago, and run neet with -x (or -X - I can't remember) to disable auto exploitation. At the moment it's permanently disabled. It used the exautosafe parameter to know if the exploit was safe for automatic exploitation. If set to 0, then it wouldn't exploit it even with auto-exploitation on. The exmanusafe is to mark whether an exploit is safe for manual exploitation. Some exploits knock machines over. In the neet shell you can use the "exploit" command which will offer you a choice of vulnerabilities you can exploit on the current host. If exmanusafe is 0 for a particular exploit, you won't be offered it. In that, case you'd use the "uexploit" (short for unsafe exploit) command to be offered the unsafe ones. I'll answer your other question shortly.

[aldo1901]

Thanks. Btw, awesome tool, very well parsed.

[JonnyHightower]

Thanks! I hope the previous answer made sense - I was rushing to get out and fetch someone. There's no current way to change the results folder - I always create one and then cd into it before running Neet. It would be pretty easy to implement though I think. I'll look into it and let you know back here shortly.

[JonnyHightower]

Hey aldo1901. If you run neet-update, you will now be able to specify an output directory with "-r directory" or "--results-dir=directory". I think I've tested it well enough. Let me know if you find any issues. :-)

[Greadsky]

Hello, sorry I steel have a question about using metasploit by the neet. In my case he don't see the file msfcli, witch already don't exist in new versios of Metasploit. So what do I need to change in neet configuration to give him possibility to use metasploit modules. Thanks in advance.