Metasploit VS Rack::Attack

I'm doing HTB Dante lab (if you have experience with this, please DM!) and I'm brute forcing a word press login with metasploit, except it keeps crashing likely due to a memory issue: https://github.com/rapid7/metasploit-framework/issues/14471

Metasploit is also available for other OS. You can learn about it by clicking on this here

We will be seeing how can you hack onto your phone in 2022 using the Metasploit Framework. This attack will be done using a Trojan created using Metasploit

I have found devs can write metasploit module by using metasploit library for python https://github.com/rapid7/metasploit-framework/wiki/Writing-External-Python-Modules. Fourtenately, I can write python program

From the date that the vulnerability is published, it is common knowledge, and automated scripts will start looking for vulnerable hosts. Manual exploitation is usually also possible through Metasploit. In August 2021, Synology warned about malware infecting Synology NAS boxes, and this was not the first time

Metasploit modules tend to pop up very quickly after vulns go public. Maybe look at https://github.com/rapid7/metasploit-framework/tree/master/modules/exploits

https://www.metasploit.com/ Been around for over 20 years

Second vote for rack-attack!

You could use something like Rack Attack to mitigate this type of behavior if it becomes an issue.

The final gem I like to include in all projects is rack-attack. This is a rate limiting tool which is great for throttling dangerous actions in your app to prevent bot attacks or other malicious users.

rack-attack to prevent bruteforce and DDoS attacks

Check out Rack Attack. It lets you block bots that make requests too fast to be real users, or that request obviously-suspect URLs (/phpmyadmin for example). There are lots of other options, but those are the quick wins IMO.

You can use rack-attack https://github.com/rack/rack-attack to implement rate limiting/blocking stuff.

https://github.com/rack/rack-attack#fail2ban

It's entirely normal and expected. If your site gets any traction, volume and sophistication of probing will only increase. I recommend starting by setting up Rack Attack (https://github.com/rack/rack-attack), that will help you block the bad actors for awhile, if the volume gets high enough you'll want to start blocking traffic upstream in reverse proxy or load balancing layer, depending on architecture.