HD Moore

From Wikipedia, the free encyclopedia
Jump to: navigation, search
This biographical article needs additional citations for verification. Please help by adding reliable sources. Contentious material about living persons that is unsourced or poorly sourced must be removed immediately, especially if potentially libelous or harmful. (November 2011)
This article may contain improper references to self-published sources. Please help improve it by removing references to unreliable sources, where they are used inappropriately. (November 2011)
HD Moore
Born 1981
Occupation Security Researcher
Employer Rapid7
Known for Metasploit
Website
http://hdm.io/

HD Moore is the creator of Metasploit, a piece of popular penetration testing software. HD founded the Metasploit Project in the summer of 2003 with the goal of becoming a public resource for exploit code research and development.[1] He is also known for his work in WarVOX, AxMan, the Metasploit Decloaking Engine and the Rogue Network Link Detection Tools.[2]

Currently, HD is Chief Research Officer at Rapid7 and Chief Architect of Metasploit, an open-source penetration testing platform.[1]

Contents

Software projects [edit]

  • The Metasploit Framework is a development platform for creating security tools and exploits. The framework is used by network security professionals to perform penetration testing, system administrators to verify patch installations, product vendors to perform regression testing, and security researchers world-wide. The framework is written in the Ruby programming language and includes components written in C and assembly language.[3] In October 2009, the Metasploit project was acquired by Rapid7.[4] While the Metasploit Framework continues to be free, Rapid7 has added a commercial edition called Metasploit Express.[5] With the acquisition of the project, HD Moore became Chief Security Officer at Rapid7 while remaining Chief Architect of Metasploit.
  • WarVOX is a suite of tools for exploring, classifying, and auditing telephone systems. Unlike normal wardialing tools, WarVOX processes the raw audio from each call and does not use a modem directly. This unique model allows WarVOX to find and classify a wide range of interesting lines, including modems, faxes, voice mail boxes, PBXs, loops, dial tones, IVRs, and forwarders using signal processing techniques.
  • AxMan is an ActiveX fuzzing engine. The goal of AxMan is to discover vulnerabilities in COM objects exposed through Internet Explorer. Since AxMan is web-based, any security changes in the browser will also affect the results of the fuzzing process. This allows for a much more realistic test than other COM-based assessment tools.
  • The Metasploit Decloaking Engine is a system for identifying the real IP address of a web user, regardless of proxy settings, using a combination of client-side technologies and custom services. No vulnerabilities are exploited by this tool. A properly configured Tor setup should not result in any identifying information being exposed.
  • The Rogue Network Link Detection Tools are designed to detect unauthorized outbound network links on large corporate networks. These tools send spoofed TCP SYN and ICMP Echo Requests with the original destination IP encoded into the packet, which can then be read back out by an external listening host.

Research projects [edit]

HD created the Month of Browser Bugs project as an experiment in fast-paced vulnerability discovery in combination with full disclosure. This started the Month of Bugs project meme and resulted a massive number of browser patches and improved security measures.

See also [edit]

References [edit]

  1. ^ a b "HD Moore - LinkedIn". Profile. LinkedIn. Retrieved 30 April 2013. 
  2. ^ http://hdm.io/ HD Moore’s personal page
  3. ^ Metasploit project page
  4. ^ Rapid7 Acquires Metasploit
  5. ^ Product page for Metasploit Express

Further reading [edit]

External links [edit]

Retrieved from "http://en.wikipedia.org/w/index.php?title=HD_Moore&oldid=555194708"