v3.4 [May 19, 2010]
The dns_enum auxiliary module now supports bruteforcing IPv6 AAAA records.
Command shell sessions can now be automated via scripts using an API similar to Meterpreter.
The console can be automated using Ruby code blocks within resource files
Initial sound support is available by loading the "sounds" plugin.
The Report mixin and report_* methods are now one-way, you can write to the database but not work with the results. This increases the scalability of the database.
Many modules report information to the database by default now (auxiliary/scanner/*).
Lotus Domino version, login bruteforce, and hash collector auxiliary modules.
Upgrade any command shell session to Meterpreter via sessions -u.
The VNC injection payload now uses the latest TightVNC codebase and bypasses Session 0 isolation.
Several modules were renamed to include their Microsoft Technet bulletin number.
Code can now interface directly with an installed Java Development Kit via a Java mixin.
Tomcat and JBoss installations can be exploited to gain sessions (Windows x86/x64, Linux x86/x64)
The msfencode utility can now generate WAR payloads for Tomcat and JBoss
Oracle XDB SID brute forcing is much more comprehensive.
The msfencode utility can now inject into an existing executable while keeping the original functionality
The XMLRPC server has been improved and additional APIs are available
The db_import command now supports NeXpose Simple XML, NeXpose Export XML, Nessus (NBE, XMLv1, XMLv2), QualysGuard XML, and Nmap
There is a new db_status command that shows which driver is currently in use and whether your database connection is active.
