Metasploit mailing list archives

Problem starting metasploit after upgrading


From: think.pink at gmx.de (think.pink at gmx.de)
Date: Fri, 05 Sep 2008 18:12:58 +0200

OS is BackTrack3 final, HD installation.

Here's what I did till now.
I renamed the .msf3 directory in my home directory, then metasploit 
started up normal. Then I copied back the config file which resides in 
the .msf3 directory - and it is still working (which means no DNS 
lookup).   ???

So after copying the config file back to the .msf3 directory msfconsole 
works fine, as far as I tested it till now (I tried a few exploits 
against my unpatched win2k box). Doing the same procedure with msfweb or 
msfgui then both tools are crashing each time at the point of selecting 
the target, since metasploit again performs this ominous DNS lookup.

Checking with tcpdump:

18:07:22.192480 IP 192.168.178.192.32773 > 192.168.178.1.53: 0+ A? 
M- at M-(M-2M- at . (22)
18:07:24.125419 IP 192.168.178.1.53 > 192.168.178.192.32773: 0 NXDomain 
0/1/0 (97)


When I remove the config file msfweb and msfgui work as expected. So 
there must be something in my config file which triggers this DNS lookup 
behaviour. But what? Any why is msfconsole now working with that???


Here's my config file:

[framework/core]
RHOST=192.168.178.25
LHOST=192.168.178.192

[framework/ui/console]
ActiveModule=exploit/windows/smb/ms06_040_netapi

[windows/smb/ms06_040_netapi]
SMBPIPE=BROWSER
SSL=false
SMBDomain=WORKGROUP
SMBName=*SMBSERVER
EnableContextEncoding=false
EXITFUNC=thread
payload=windows/meterpreter/reverse_tcp
SMBPass=
SMB::pad_file_level=0
SMB::pipe_write_min_size=1
SMB::pipe_write_max_size=1024
SMB::obscure_trans_pipe_level=0
DCERPC::ReadTimeout=0
DCERPC::fake_bind_multi_append=0
ConnectTimeout=10
SMBDirect=true
SMB::pipe_evasion=false
DCERPC::fake_bind_multi=true
DCERPC::fake_bind_multi_prepend=0
TCP::send_delay=0
EncoderDontFallThrough=false
SMB::pipe_read_min_size=1
SMB::pad_data_level=0
RHOST=192.168.178.25
SMBUser=
RPORT=445
LHOST=192.168.178.192
DCERPC::max_frag_size=4096
WfsDelay=0
TARGET=0
SMB::pipe_read_max_size=1024
DCERPC::smb_pipeio=rw
TCP::max_send_size=0





H D Moore wrote:
What operating system?

On Thursday 04 September 2008, think.pink at gmx.de wrote:
  
So does anyone have the same weird problem?
Can somebody please tell me what's going wrong here and why metasploit
now performs an DNS lookup at startup?
    


_______________________________________________
http://spool.metasploit.com/mailman/listinfo/framework


  




Current thread: