Wednesday, 11 April 2007

Metasploit Automated Exploitation on N800

As suggested by spaceaquarium, I've tried to get Metasploit Automated Exploitation (one of the killer features of Metasploit Framework 3) working on my N800. And that's easy.

You need Ruby and RubyGems, then install ActiveRecord with gem (for these steps, see my posts about Metasploit Framework and msfweb on N800). Now, install sqlite3-ruby (you may use my package for that).

Last but not least... you need Nmap. You can use this repository.

UPDATE : you can also use my package for Nmap, as it's the latest stable version.

Now, run msfconsole, then :
msf > load db_sqlite3
msf > db_autopwn
[*] Usage: db_autopwn [options]
[...]

msf > db_nmap -p 22,445 [TARGET]

Starting Nmap 3.95 ( http://www.insecure.org/nmap/ ) at 2007-04-11 13:52
[...]
Nmap finished: [...]
msf > db_autopwn -p -t
[*] Analysis completed in [...]
[...]

Nice ! More about this feature here.

7 comments:

spaceaquarium said...

just have to say one word, perfect :) okay one more, thankyou

spaceaquarium said...

Hi Pierre,
now its time to port ruby-gtk2 and ruby-libglade2 package. Then we have a GUI ;)
see screenshots at
http://laramies.blogspot.com/

are u able (i know u can) to port the packages?

greez

Fernando said...

I am looking forward to that GUI!
Grate work Pierre!

mfreshmfresh said...

Great work Pierre. If you are using Metasploit on the N800, how do you update it to the latest version, as there is no SVN client?

Pierre said...

mfreshmfresh: I just run svn update on my computer, clean the SVN directories, then copy the whole content to the N800.

Paul Rubens said...

Pierre, thanks for your reply. How do you clean the SVN directories. However, after I do this, using find . -name .svn -exec rm -fr {} \;
when I transfer the Metasploit3 folder to the N800, if I try to run db_create xxxx
I get the error messagesqlite3 not found.
This doesn't happen if I just download the tarball from metasploit.com
Any ideas?

Pierre said...

@Paul Rubens: do you have sqlite3 installed on your N800 ?