http://www.securityforest.com/wiki/index.php/Exploitation_Framework

Don

I would'nt say that this framework is awesome.

After having a look at this I have to say that there is still a lot of work for the maintainers and the community to do before that framework becomes useable.

If you download the exploit tree you get about 2000 exploits (statistcs give you that number) but in the framework there are definitions for about 20 of them - that means that you can use that 20 out of the box.

If you want to use others you have to add them to the framework - the problem is that there is no documentation of the whole system (at least I could not find it) so you have to figure out yourself if there is the exploit you want to use and after that how to add it to the framework.

Furthermore the website is a little bit confusing - after having downloaded the exploit tree iit took me a while to find where to download the framework.

The idea is not bad but it really needs at least a minimum of documentation to be useable in a pentest...