H. D. Moore

From Wikipedia, the free encyclopedia
H. D. Moore
Hdm2018.png
Born1981
NationalityU.S. American
OccupationInformation security researcher and programmer
Known forMetasploit
Websitehdm.io

H. D. Moore is a network security expert, open source programmer, and hacker. He is a developer of the Metasploit Framework, a penetration testing software suite, and the founder of the Metasploit Project.

He served as chief research officer at Boston, Massachusetts-based security firm Rapid7, a provider of security data and analytics software and cloud solutions. He remained the chief architect of the Metasploit Framework until his departure from Rapid7 in 2016.[1] Since leaving Rapid7, Moore has joined Atredis Partners as the vice president of research and development[2] and founded Rumble, Inc.,[3] the software firm that develops Rumble Network Discovery.[4]

He has been referred to as "the industry's most famous white hat hacker."[5]

Information Security work[]

Moore developed security software utilities for the United States Department of Defense as a teenager,[5] and founded the Metasploit Project in the summer of 2003 with the goal of becoming a public resource for exploit code research and development.[6]

He is known for his work in WarVOX, AxMan, the Metasploit Decloaking Engine and the Rogue Network Link Detection Tools.,[7] and started a "Month of Browser Bugs" (MoBB) initiative in 2006[8] as an experiment in fast-paced vulnerability discovery with . This started the Month of Bugs project meme, and resulted a number of web browser patches and improved security measures.

Moore has discovered, or been involved in the discovery of, a number of critical security vulnerabilities.[9][10]

Metasploit Framework[]

The Metasploit Framework is a development platform for creating security tools and exploits. The framework is used by network security professionals to perform penetration testing, system administrators to verify patch installations, product vendors to perform regression testing, and security researchers worldwide. The framework is written in the Ruby programming language and includes components written in C and assembly language.[11] In October 2009, the Metasploit project was acquired by Rapid7.[12] While the Metasploit Framework continues to be free, Rapid7 has added a commercial edition called Metasploit Express.[13] With the acquisition of the project, HD Moore became Chief Security Officer at Rapid7 while remaining Chief Architect of Metasploit.

WarVOX[]

Main article: WarVOX

WarVOX is a software suite for exploring, classifying, and auditing telephone systems. Unlike normal wardialing tools, WarVOX processes the raw audio from each call and does not use a modem directly. This model allows WarVOX to find and classify a wide range of interesting lines, including modems, faxes, voice mail boxes, PBXs, loops, dial tones, IVRs, and forwarders using signal processing techniques.

AxMan[]

AxMan is an ActiveX fuzzing engine. The goal of AxMan is to discover vulnerabilities in COM objects exposed through Internet Explorer. Since AxMan is web-based, any security changes in the browser will also affect the results of the fuzzing process.

Metasploit Decloaking Engine[]

The Metasploit Decloaking Engine is a system for identifying the real IP address of a web user, regardless of proxy settings, using a combination of client-side technologies and custom services. No vulnerabilities are exploited by this tool. A properly configured Tor setup should not result in any identifying information being exposed.

Rogue Network Link Detection Tools[]

The Rogue Network Link Detection Tools are designed to detect unauthorized outbound network links on large corporate networks. These tools send spoofed TCP SYN and ICMP Echo Requests with the original destination IP encoded into the packet, which can then be read back out by an external listening host.

Criticism[]

Moore's work has gained him both praise and antagonism in the industry. Companies such as Microsoft have credited him with discovering vulnerabilities, yet some criticism of Metasploit and similar tools, due to their capacity for criminal use (rather than just offensive security), has fallen upon Moore himself. Moore has been warned by US law enforcement about his involvement in the Critical.IO scanning project.[14] According to Moore, though, "We're always chasing the bad guys – the good guys are never ahead. We're not the ones who wrote these exploits. They are often found in the wild and the defenders are generally following the black hats."[15]

References[]

  1. ^ "HD Moore Chief Security Officer, Rapid7". RSA Conference. Archived from the original on 13 December 2014. Retrieved 15 November 2014.
  2. ^ "Team - Atredis Partners", May 14, 2019, www.atredis.com/team
  3. ^ "Rumble, Inc.", May 14, 2019, www.rumble.run
  4. ^ "Rumble Network Discovery", May 14, 2019, www.rumble.run
  5. ^ a b Jackson Higgins, Kelly (September 28, 2006). "HD Moore Unplugged". Dark Reading. Information Week. Retrieved July 15, 2015. Of course, being the industry's most famous white hat hacker also makes you a popular target
  6. ^ Biancuzzi, Federico. "Metasploit 3.0 day". Security Focus. Retrieved 15 November 2014.
  7. ^ http://hdm.io/ HD Moore’s personal page
  8. ^ "A Month of Browser Bugs", August 3, 2006, www.schneier.com
  9. ^ Keizer, Gregg. "HD Moore takes iPhone exploits public". ComputerWorld. Retrieved 2017-04-27.
  10. ^ Nachneir. "H.D. Moore Unveils Major UPnP Security Vulnerabilities". Watchguard Security. Retrieved 2017-04-27.
  11. ^ Metasploit project page
  12. ^ Rapid7 Acquires Metasploit
  13. ^ Product page for Metasploit Express
  14. ^ Brewster, Tom. "US cybercrime laws being used to target security researchers". The Guardian. Retrieved 15 November 2014.
  15. ^ Bort, Julie. "Metasploit's HD Moore from (almost) rags to (not quite) riches". Infoworld. Retrieved 15 November 2014.

Further reading[]

  • The Hacker Diaries by Dan Verton, Mar 26, 2002, ISBN 0-07-222364-2, pp. 166–181

External links[]

Retrieved from ""