Metasploit mailing list archives

browser_autopwn broken


From: egypt at metasploit.com (egypt at metasploit.com)
Date: Wed, 30 Sep 2009 23:49:22 -0600

That particular exploit (safari_metadata_archive) requires a
commandline zip utility.  Since Windows doesn't come with a zip
command, this will always fail from a Windows host.  The error should
now be a little more useful.

Thanks,
egypt


On Mon, Sep 28, 2009 at 1:21 AM, Donna Hawthorne
<donnahawthorneonline at googlemail.com> wrote:
Still fails for me(same setup as before, latest from svn), something
different this time, I'm not sure why the zip file is not created


[*] Request '/autopwn' from 192.168.2.129:1541
[*] Request
'/autopwn?sessid=V2luZG93czpYUDp1bmRlZmluZWQ6ZW4tdXM6eDg2Ok1TSUU6OC4wOg%3d%3d'
from 192.168.2.129:1542
[*] JavaScript Report: Windows:XP:undefined:en-us:x86:MSIE:8.0:
[*] Responding with exploits
Error: No such file or directory - /home/donna/vgRPY95N.zip
(eval):116:in `initialize'
(eval):116:in `new'
(eval):116:in `generate_zip'
(eval):83:in `on_request_uri'
/msf3/lib/msf/core/exploit/http.rb:343:in `block in start_service'
/msf3/lib/rex/proto/http/handler/proc.rb:37:in `call'
/msf3/lib/rex/proto/http/handler/proc.rb:37:in `on_request'
/msf3/lib/rex/proto/http/server.rb:340:in `dispatch_request'
/msf3/lib/rex/proto/http/server.rb:279:in `on_client_data'
/msf3/lib/rex/proto/http/server.rb:142:in `block in start'
/msf3/lib/rex/io/stream_server.rb:45:in `call'
/msf3/lib/rex/io/stream_server.rb:45:in `on_client_data'
/msf3/lib/rex/io/stream_server.rb:183:in `block in monitor_clients'
/msf3/lib/rex/io/stream_server.rb:181:in `each'
/msf3/lib/rex/io/stream_server.rb:181:in `monitor_clients'
/msf3/lib/rex/io/stream_server.rb:68:in `block in start'





Current thread: