Rapid7 Metasploit Changes the Security Mindset at AutomationDirect

AutomationDirect implemented a comprehensive Rapid7 solution that includes Nexpose Enterprise Edition for vulnerability scanning and Metasploit Pro for penetration testing. Together, these tools provide a complete solution for risk assessment and remediation across the data center, networks, and Web servers. Metasploit Pro, with its extensive database of quality-assured exploits, allows Lawrence to emulate realistic network attacks on specific targets within the AutomationDirect environment. The tool assesses the security of Web applications, network and endpoint systems, and email users. Its user-friendly interface enables Lawrence to automate tasks and leverage multi-level attacks, completing penetration tests faster than with the freeware version. The solution also includes support for Web application exploits, managing client-side campaigns against end users, VPN pivoting, and team collaboration. After using Metasploit to break into a Web server, Lawrence runs the Nexpose vulnerability scanner through the compromised server. He uses VPN pivoting to discover exploitable vulnerabilities in databases hosting confidential customer and employee data. This information can be leveraged to conduct social engineering attacks, such as targeted phishing campaigns, to open new attack vectors on the internal network.