First impressions of Metasploit 3.0

I downloaded the first Alpha release of Metasploit 3.0 [1] (MSF3) last night.  For those of you who don't know, MSF3 has been completely re-implimented in Ruby [2]. 

There aren't many changes to the console or web interface.  The workflow is still use exploit, set payload, set options, check, exploit.  New options have been added for using recon modules, however, which will scan for open ports or vulnerabilities.

There are exciting new options for find tag payloads that reuse the exploit connection for payload communications.  Meterpreter can now be used to pivot an attack on a compromised host by sending network traffic through a comm API.

Speaking of APIs, everything in Metasploit is now extensible, reusable, and scriptable (how's that for some buzz words?).  There's a already well developed set of developer documentation [3].

I've run into some reliability issues, but that's why they call it an Alpha 1 release, right?

I think we're going to see big things from the Metasploit group [4] in the future.