maemo.org - Talk

maemo.org - Talk (https://talk.maemo.org/index.php)
-   Nokia N900 (https://talk.maemo.org/forumdisplay.php?f=44)
-   -   Metasploit N900 install (https://talk.maemo.org/showthread.php?t=81816)

stevomanu 2012-01-23 20:14

Metasploit N900 install
 
http://www.metasploit.com/images/global/logo.png install for N900
FOR ALL THOSE HAVING ISSUES UNDERSTANDING THIS PROGRAM CHECK OUT THIS SITE ALL YOUR QUESTIONS ARE ANSWERED ....


For those that want to know more about metasploit check out there site for more info Here is link



First download latest metasploit package 75MB

I recommend extarcting this on a pc as extracted its 347MB and seems to cause problems
when using filebox im guessing terminal might work better but i just used pc as its easyer ..

I placed MSF folder in

Code:

/home/opt/
Then chance to metasploit directory

Code:

cd /home/opt/msf/
Code:

chmod +x msfconsole
Once folder is in place you will need to install the following packages

Code:

apt-get install ruby1.8 irb1.8 rdoc1.8 libopenssl-ruby1.8 subversion
Downlaod this pack of rubygems 1.8.10 as its the only version i could seem
to get working with metasploit ..

Extract to
Code:

/home/opt/
and then in terminal

Code:

cd /home/opt/rubygems-1.8.10
Code:

ruby1.8 setup.rb
if all goes well you should end up with

https://dl.dropbox.com/u/44965378/sc...123-200045.png


Then finally we are ready to load up Metasploit

Code:

ruby1.8 /home/opt/msf/msfconsole -L
https://dl.dropbox.com/u/44965378/sc...123-194322.png

when you try and update the framework you will get svn, segmentation fault
follow this tutorial to fix this issue

Wow my first big post not the best but as there wasn't a Metasploit install here i had to give it ago , Its not the easiest program to use but can be so much fun .. If you have any suggestions or problems please give me a shout i will do my best to help .....






:D

stevomanu 2012-01-23 20:17

Re: Metasploit N900 install
 
Will add some commands and exploits here very soon ....:D

q6600 2012-01-23 21:39

Re: Metasploit N900 install
 
Metasploit - The Penetration Testers Guide - 2011 pdf

http://pcsci3nce.info/?p=441
thx to Unhuman

udaychaitanya16 2012-01-25 04:44

Re: Metasploit N900 install
 
Awesome.I have been trying to install metasploit since ages.Ruby gems created problem every time.Your tutorial helped me to have the console.Thank you very much.

stevomanu 2012-01-25 05:12

Re: Metasploit N900 install
 
No problem glad you like it . have fun

Quote:

Originally Posted by udaychaitanya16 (Post 1155301)
Awesome.I have been trying to install metasploit since ages.Ruby gems created problem every time.Your tutorial helped me to have the console.Thank you very much.


chatbox 2012-01-25 13:47

Re: Metasploit N900 install
 
To get SVN working, you need the following (otherwise, svn will seg fault):
Code:

root
apt-get install libaprutil1=1.3.9-2
apt-get install libapr1=1.4.2-1

Referenced from: http://talk.maemo.org/showthread.php?t=70570&page=6

Then, I also ran:
Code:

cd /home/opt/msf/
chmod +x msfupdate
ruby1.8 msfupdate


trisha02 2012-01-25 14:01

Re: Metasploit N900 install
 
noob question- what can you do with metasploit. please explain it fr a noob. plzz

jedi 2012-01-25 14:08

Re: Metasploit N900 install
 
Quote:

Originally Posted by trisha02 (Post 1155482)
noob question- what can you do with metasploit. please explain it fr a noob. plzz

Read the first sentence in the first post. Then click the link. If you still don't understand, it's not for you...

If you can't be bothered to do that, Google will help...

trisha02 2012-01-25 14:35

Re: Metasploit N900 install
 
sorry. i read evrythng. but still dint know all these terms. i just wanted to learn from you guys who are expert. its okay. i used cleven, yamas to hack. so i thought i could do it too. sorry again. dnt hav to explain :) take care

sr00t 2012-01-25 16:06

Re: Metasploit N900 install
 
sorry but the untar of the archive goes for 124 mb uncompressed...is that right?

stevomanu 2012-01-25 16:23

Re: Metasploit N900 install
 
uncompressed its 374MB ...... its a big program but worth the fun if you can work out how to use it ..

Quote:

Originally Posted by sr00t (Post 1155556)
sorry but the untar of the archive goes for 124 mb uncompressed...is that right?


sr00t 2012-01-25 16:43

Re: Metasploit N900 install
 
Quote:

Originally Posted by stevomanu (Post 1155564)
uncompressed its 374MB ...... its a big program but worth the fun if you can work out how to use it ..

uncompressed it under 2 different pc's with win7, same result. 124 mb directory. i'm sure is a win7 problem about how displays disk usage of certain dir.
intregrity of the compressed file should be fine as it's 75 mb and winrar won't complain about checksum problems.

stevomanu 2012-01-25 17:46

Re: Metasploit N900 install
 
have you tryed extracting this via xterminal failing that i will download latest version and upload it some were for people to download .....

let me know how ya get on ......

Quote:

Originally Posted by sr00t (Post 1155573)
uncompressed it under 2 different pc's with win7, same result. 124 mb directory. i'm sure is a win7 problem about how displays disk usage of certain dir.
intregrity of the compressed file should be fine as it's 75 mb and winrar won't complain about checksum problems.


eight 2012-01-25 18:34

Re: Metasploit N900 install
 
you can try to extract it with 7-zip.

trisha02 2012-01-25 18:39

Re: Metasploit N900 install
 
so it is used to hack into a windows machine.and can manipulate it. but m not good at commands after complete installing. so what commands should i type to take control of a windows machine. and show it on my N900 using vnc.coz i cant control pc with command prompt. and does the pc needs to be connected with the same network as my N900 while exploiting it? plzz help

sr00t 2012-01-25 18:50

Re: Metasploit N900 install
 
Quote:

Originally Posted by stevomanu (Post 1155603)
have you tryed extracting this via xterminal failing that i will download latest version and upload it some were for people to download .....

let me know how ya get on ......

Alright, the problem was this. Avast deleted files INSIDE the compressed file.

https://community.rapid7.com/community/infosec

Downloading it again ;)

trisha02 2012-01-25 19:06

Re: Metasploit N900 install
 
y isnt anyone helping me. guys please :(

udaychaitanya16 2012-01-25 19:25

Re: Metasploit N900 install
 
@chatbox

Code:

root
apt-get install libaprutil1=1.3.9-2
apt-get install libapr1=1.4.2-1


Thank you its updated.

If we apt-get upgrade will there be any problem for the libs ?

should we do as what ajack said?

stevomanu 2012-01-25 20:12

Re: Metasploit N900 install
 
follow these instructions and it will sort your problem when using , it will block them from updating ...

Code:

apt-get update

http://talk.maemo.org/showpost.php?p...3&postcount=69



Because people dont wunna do all the work for you thats probly why if you cant understand how it all qworks then im not really sure this program is for you ....

................................


Quote:

Originally Posted by trisha02 (Post 1155636)
so it is used to hack into a windows machine.and can manipulate it. but m not good at commands after complete installing. so what commands should i type to take control of a windows machine. and show it on my N900 using vnc.coz i cant control pc with command prompt. and does the pc needs to be connected with the same network as my N900 while exploiting it? plzz help

i would suggest having a look here all the info you need
http://www.offensive-security.com/me...shed/Main_Page

as for VNC session thats not possible as yet need to find a way of linking VNC with metasploit

Quote:

Originally Posted by sr00t (Post 1155643)
Alright, the problem was this. Avast deleted files INSIDE the compressed file.

https://community.rapid7.com/community/infosec

Downloading it again ;)

As i dont use AV i didnt realiz cheers thou ....

anthonie 2012-01-25 20:18

Re: Metasploit N900 install
 
Quote:

Originally Posted by sr00t (Post 1155643)
Alright, the problem was this. Avast deleted files INSIDE the compressed file.

https://community.rapid7.com/community/infosec

Downloading it again ;)

Now that was one of the reasons for me to switch to Linux as my primary OS, years ago.

Nowadays I run a dualboot because I use Photoshop a lot as well as some music creation progs that are windows only, but in my experience, Windows is a nice OS as long as you don't connect it to the internet.

sr00t 2012-01-25 20:33

Re: Metasploit N900 install
 
Quote:

Originally Posted by anthonie (Post 1155695)
Now that was one of the reasons for me to switch to Linux as my primary OS, years ago.

Nowadays I run a dualboot because I use Photoshop a lot as well as some music creation progs that are windows only, but in my experience, Windows is a nice OS as long as you don't connect it to the internet.

Yeah.. Good reason. I gave up with Linux for domestic purposes months ago.
I work as a Solaris admin.. But I prefer W7 for everyday use.

Mentalist Traceur 2012-01-25 20:36

Re: Metasploit N900 install
 
There's how-to's to this floating around for a while (I think metasploit's site itself had a page on how to install it on the N900), but this seems to have helped some people install it, so good work Stevomanu.

sr00t 2012-01-25 22:34

Re: Metasploit N900 install
 
Alright, N900 onboard flash mmc takes a looot to upload by USB (it seems to lack performance for creating so much little files).
I'm copying it to the microSD Class6 I have. It goes 5 times faster than the internal flash memory.

stevomanu 2012-01-26 16:55

Re: Metasploit N900 install
 
For all those out there that dont like reading up on things here is a set of videos that show metasploit in its true form an what it can do from beginner to advanced theres about 20 videos in all and explains a lot ...

Metasploit Megaprimer (Exploitation Basics And Need For Metasploit)

Im also sure theres a torrent of this somewere around a 1gig in size check that out if you want the vids for future reference ....

......................

psychologe 2012-02-13 08:20

Re: Metasploit N900 install
 
had a question,i had install metasploit on N900,but how to use db command in metasploit.
i want use gem1.8 install mysql
Nokia-N900:~# gem1.8 install mysql
Building native extensions. This could take a while...
ERROR: Error installing mysql:
ERROR: Failed to build gem native extension.

/usr/bin/ruby1.8 extconf.rb
extconf.rb:10:in `require': no such file to load -- mkmf (LoadError)
from extconf.rb:10


Gem files will remain installed in /usr/lib/ruby/gems/1.8/gems/mysql-2.8.1 for inspection.
Results logged to /usr/lib/ruby/gems/1.8/gems/mysql-2.8.1/ext/mysql_api/gem_make.out



anyone konw how to insall db in metaspolit? thanks very much.

stevomanu 2012-03-12 19:13

Re: Metasploit N900 install
 
Just wondering if you want to install DB for the AUTOPWN function because if so , the AUTOPWN option has been removed but metasploit as it was to buggy , if not then i am not sure as to what your issue is as i dont use it on my phone .....

sorry couldnt be more help

Quote:

Originally Posted by psychologe (Post 1164315)
had a question,i had install metasploit on N900,but how to use db command in metasploit.
i want use gem1.8 install mysql
Nokia-N900:~# gem1.8 install mysql
Building native extensions. This could take a while...
ERROR: Error installing mysql:
ERROR: Failed to build gem native extension.

/usr/bin/ruby1.8 extconf.rb
extconf.rb:10:in `require': no such file to load -- mkmf (LoadError)
from extconf.rb:10


Gem files will remain installed in /usr/lib/ruby/gems/1.8/gems/mysql-2.8.1 for inspection.
Results logged to /usr/lib/ruby/gems/1.8/gems/mysql-2.8.1/ext/mysql_api/gem_make.out



anyone konw how to insall db in metaspolit? thanks very much.


one1002 2012-03-15 14:36

Re: Metasploit N900 install
 
hi bro, i think the link is down..mind checking it? =)

one1002 2012-03-15 14:36

Re: Metasploit N900 install
 
and the securitytube videos are not available as well..

Quote:

Error: Server Error

The server encountered an error and could not complete your request.
If the problem persists, please report your problem and mention this error message and the query that caused it.

stevomanu 2012-03-15 14:40

Re: Metasploit N900 install
 
Problem is your end buddy both links are working fine here ......

just checked now ....

one1002 2012-03-15 15:04

Re: Metasploit N900 install
 
yikes..stupid as$ safari..lol..downloading it via firefox.. =D thx mate..

one1002 2012-03-16 04:37

Re: Metasploit N900 install
 
Quote:

Originally Posted by stevomanu (Post 1155564)
uncompressed its 374MB ...... its a big program but worth the fun if you can work out how to use it ..

same thing..when i extracted on my mac..the folder was
Code:

352.9 MB on disk (227,470,908 bytes) for 9,942 items
when i SSHed it via Cyberduck, it shows only 129mb..

darksurfer 2012-03-16 22:54

Re: Metasploit N900 install
 
Quick question, I installed eveything, but when I try to run msfconsole nothing happens, does it take a while to load the 1st time?

Thanx

stevomanu 2012-03-16 23:14

Re: Metasploit N900 install
 
Yes it will take ages , i would suggest leaving it load up with out using phone it will load faster then with no errors ...


Quote:

Originally Posted by darksurfer (Post 1180471)
Quick question, I installed eveything, but when I try to run msfconsole nothing happens, does it take a while to load the 1st time?

Thanx


preflex 2012-04-06 19:26

Re: Metasploit N900 install
 
Hi. Thanks a lot for this guide. Unfortunately, I haven't been able to get this to run.
Code:

/home/opt/msf # ruby1.8 msfconsole -L
/home/opt/msf/lib/fastlib.rb:368:in `fastlib_original_require': /home/opt/msf/lib/rex/text.rb:274: syntax error, unexpected $end, expecting kEND (SyntaxError)
...
                              ^
        from /home/opt/msf/lib/fastlib.rb:368:in `require'
        from /home/opt/msf/lib/rex.rb:44
        from /home/opt/msf/lib/fastlib.rb:368:in `fastlib_original_require'
        from /home/opt/msf/lib/fastlib.rb:368:in `require'
        from msfconsole:121
/home/opt/msf #

And when I try to update, I get
Code:

/home/opt/msf # ruby1.8 msfupdate[*][*] Attempting to update the Metasploit Framework...[*]

svn: XML parser failed in 'external/source/vncdll/winvnc'
svn: Malformed XML: not well-formed (invalid token) at line 340
svn: Working copy '.' locked
svn: run 'svn cleanup' to remove locks (type 'svn help cleanup' for details)
/home/opt/msf #

Any ideas? Thanks for the help.

stevomanu 2012-04-07 23:10

Re: Metasploit N900 install
 
Well i havnt faced them issues before to be honest , have you downloaded the latest version of MSF also make sure you use the ruby files i posted as i couldnt get this to run on any other version than i posted .....

Also did you do the svn clean up and the try an update again ....

.....

carbonjha 2012-04-11 01:27

Re: Metasploit N900 install
 
database connect working yet?? want to use autopwn. installed the mysql database & running it successfully but cant connect with msf.
db_status command gives:
no database driver installed. Try 'gem install pq'

found a problem with the sniffer "psnuff".

"pcaprub module not available"

solved it by making the N900 a full software development kit. compiled the "pcaprub.rb" module & put it in the correct directory. set the INTERFACE to wlan0 & then executed "run" command & I was successful. if anyone interested using the "psnuff" then I will write the whole tutorial.

werepacman 2012-04-15 11:16

Re: Metasploit N900 install
 
Sorry if this some kind of offtopic.
I was following this instruction:
https://community.rapid7.com/docs/DOC-1295
I downloaded metasploit from official site.
Everything installed flawless except metasploit.

Installation stops with an error

Quote:

./metasploit-latest-linux-installer.run
./metasploit-latest-linux-installer.run: line 2: syntax error: unexpected end of file (expecting “)”)

carbonjha 2012-04-18 22:24

Re: Metasploit N900 install
 
1 Attachment(s)
I've been googling & researching for 3 days if any database to work with metasploit. it was very hard to setup & running the mysql database but it didnt show up in db_status. it took one day. then I tried postgresql. I assumed that no deb package for maemo. so tried to compile it. yah...thts right,,,,,i tried hard solving lots of dependency but again it didnt work at all as the compilation wasnt successful. but I didnt stop my quest. searched the TMO. found this talk.maemo.org/showpost.php?p=1170244&postcount=5 followed it correctly. and finally oh I'm so happy. I'm soooo happy. It worked. now the postgresql is selected but the there is no connection & I'm too tired. going to sleep now.
Love my phone the mighty N900.

saponga 2012-04-24 12:06

Re: Metasploit N900 install
 
Quote:

Originally Posted by carbonjha (Post 1194074)
now the postgresql is selected but the there is no connection & I'm too tired. going to sleep now.

Hi man,
Did you solved that connection problem ?

carbonjha 2012-04-25 21:53

Re: Metasploit N900 install
 
2 Attachment(s)
I couldnt connect because the actual postgresql server package is not available for maemo. The thing that drives me crazy is for both sqlite3 and MySQL database I found every package needed. But sqlite3 is no longer supported by metasploit and MySQL didnt show up with db_status. I tried my best to make MySQL work but it just didnt work. oh!! GOD!! why this happens only with me??

Now Im setting up Maemo SDK to compile postgresql. I dont know what will happen this time. Though without any database I did a lot of pentest & I was successful almost every time. with the help of Wifite it takes 30 mins to 1hr to get into a machine remotely.
I have lots in my mind yet to try like client base exploit, pivoting, antivirus & firewall service manipulation and of course database as it is needed to pentest a large network with lot of machines.

added screenshots of successful meterpreter session I had yesterday with the help of WiFite and nmap. though sometimes N900 ran slowly even got stuck, some commands took a lot of time I was happy. It was a great day.


All times are GMT. The time now is 20:42.

vBulletin® Version 3.8.8