Systeembeheerders die willen weten of hun systemen kwetsbaar zijn voor de Morto-worm die zich op dit moment via het Remote Desktop Protocol verspreidt, kunnen 'hackertool' Metasploit gebruiken. "Gelukkig biedt Metasploit een eenvoudige manier om het lokale Administrator account op zwakke wachtwoorden te testen", zegt ontwikkelaar H.D. Moore. Hij zette 
Microsoft heeft nieuwe versies van Whats new
There has been a couple of bugfixes and improving especially regarding file inclusions which are vital for correct analysis. Also RIPS now tries to analyse SQL queries on quotes before a decision on correct securing is made. However this feature is still not 100% working correctly in all cases.
// safe
$name = mysql_real_escape_string($_GET['name']);
mysql_query("SELECT * FROM users WHERE name = '$name'");
// vulnerable
$id = mysql_real_escape_string($_GET['id']);
mysql_query("SELECT * FROM users WHERE id = $id");
The main new visible features are graphs. Besides the list of all scanned files RIPS now gives a nice overview on how files are connected to eachother, what files accept sources (userinput) and what files have sensitive sinks or vulnerabilities. It also splits the scanned files in main files (blue) and included files (red) so that entry points can be spotted easily.
