Remove support for msfdb remote webservice

[adfoster-r7]

Summary

Future versions of Metasploit framework may remove the msfdb remote webservice

Metasploit has support for running with a local database, or from a remote web service which can be initialized with:

msfdb init --component webservice

It's not clear if users currently activate this functionality. If you use the webservice functionality, please react/reply in some way to this open issue.

[cr4shboy]

It's being used heavily for the integrations :|

[adfoster-r7]

Thanks for the comment; Which integrations are they?

[cr4shboy]

Thanks for the comment; Which integrations are they?

In our company we integrated MSF with other engines, like Osmedeus, Nemesis. Now building own web GUI for retrieving info and using it in the workflow engine passing further for recon, enum. Not updating the MSF too often, because of comprehensive review needed to keep the chain flowing, but if in near future we’ll do so and if the API will be no more, tough time awaits to rewire the solution 🤔 In a year or so we plan to offer GUI and the k8s built solution to the Github, when all the GUI basics will be in place.

So the ling story short 🖖

[QuantGeekDev]

I think it's cool. What are the alternatives to it? Are there any good ways to do remote control via REST API?

[Pavel-Sayekat]

Its a good gui option besides armitage.