All of them.
By law. https://gnusocial.de/attachment/3809314
@OJ @[email protected] re. volume, are you saying that keeping CVE-1954-whatever around in MSF means that the core implementation around running exploits has cruft in it that would be otherwise unnecessary? Or just that in general it could use a refactor?
FWIW, my use-case for MSF tends to pretty much boil down to Meterpreter and post-exploitation.
(... and still over 100 chars left on the table! :sunglasses: )
@[email protected] I'm sure @OJ probably has some kind of opinion about this... :grin:
I'm not a professional pentester, but my 2 cents would be that if your understanding of what msf is reduces down roughly to "a framework of exploits for delivering last year's CVEs", then you might be somewhat out of date with respect to your knowledge of msf's current capabilities (as well as how people are actually using it in the real world).