Metasploit mailing list archives

Re: psnuffle error on OS X 10.6


From: xyberpix <xyberpix () xyberpix com>
Date: Wed, 24 Feb 2010 17:47:28 +0000

Hey all,

Okay, so after some research, and HD's help, I've managed to get this far, but I want to run this on en1, and not the 
en0 interface, I've had a look a "show advanced" and I can't seem to find anywhere to set this.

HDM, btw thank you again for your help, managed to get there in the end only to run into another issue.

TIA

xyberpix



Toxin:msf3 xyberpix$ locate extconf.rb
/Users/xyberpix/Tools/msf3/external/pcaprub/.svn/text-base/extconf.rb.svn-base
/Users/xyberpix/Tools/msf3/external/pcaprub/extconf.rb
/Users/xyberpix/Tools/msf3/external/ruby-lorcon/.svn/text-base/extconf.rb.svn-base
/Users/xyberpix/Tools/msf3/external/ruby-lorcon/extconf.rb
/Users/xyberpix/Tools/msf3/external/ruby-lorcon2/.svn/text-base/extconf.rb.svn-base
/Users/xyberpix/Tools/msf3/external/ruby-lorcon2/extconf.rb
/Users/xyberpix/Tools/msf3/external/serialport/.svn/text-base/extconf.rb.svn-base
/Users/xyberpix/Tools/msf3/external/serialport/extconf.rb
/opt/local/lib/ruby/gems/1.8/gems/sqlite3-ruby-1.2.5/ext/sqlite3_api/extconf.rb
/opt/local/var/macports/sources/rsync.macports.org/release/ports/ruby/rb-cocoa/files/patch-ext-rubycocoa-extconf.rb.in.diff
/opt/local/var/macports/sources/rsync.macports.org/release/ports/ruby/rb-gd/files/patch-extconf.rb.diff
/opt/local/var/macports/sources/rsync.macports.org/release/ports/ruby/rb-mp3taglib/files/patch-extconf.rb
/opt/local/var/macports/sources/rsync.macports.org/release/ports/ruby/rb-net-geoip/files/patch-extconf.rb
/opt/local/var/macports/sources/rsync.macports.org/release/ports/ruby/rb-opengl/files/patch-extconf.rb
/usr/share/swig/1.3.31/ruby/extconf.rb
Toxin:msf3 xyberpix$ cd external/pcaprub/
Toxin:pcaprub xyberpix$ ruby extconf.rb
checking for pcap_open_live() in -lpcap... yes
checking for pcap_setnonblock() in -lpcap... yes
creating Makefile
Toxin:pcaprub xyberpix$ make
/usr/bin/gcc-4.2 -I. -I. -I/opt/local/lib/ruby/1.8/i686-darwin10 -I. -I/opt/local/include -D_XOPEN_SOURCE 
-D_DARWIN_C_SOURCE  -I/opt/local/include -fno-common -O2 -arch x86_64  -fno-common -pipe -fno-common  -arch x86_64 -c 
pcaprub.c
/usr/bin/gcc-4.2 -dynamic -bundle -undefined suppress -flat_namespace -o pcaprub.bundle pcaprub.o -L. -L/opt/local/lib 
-L. -L/opt/local/lib  -arch x86_64  -lruby -lpcap -lpcap  -lpthread -ldl -lobjc  
Toxin:pcaprub xyberpix$ sudo make install
Password:
/usr/bin/install -c -m 0755 pcaprub.bundle /opt/local/lib/ruby/site_ruby/1.8/i686-darwin10
Toxin:pcaprub xyberpix$ sudo ./msfconsole 
sudo: ./msfconsole: command not found
Toxin:pcaprub xyberpix$ cd ..
Toxin:external xyberpix$ cd ..
Toxin:msf3 xyberpix$ sudo ./msfconsole 

                |                    |      _) |   
 __ `__ \   _ \ __|  _` |  __| __ \  |  _ \  | __| 
 |   |   |  __/ |   (   |\__ \ |   | | (   | | |   
_|  _|  _|\___|\__|\__,_|____/ .__/ _|\___/ _|\__| 
                              _|                   


       =[ metasploit v3.3.4-dev [core:3.3 api:1.0]
+ -- --=[ 524 exploits - 245 auxiliary
+ -- --=[ 193 payloads - 23 encoders - 8 nops
       =[ svn r8614 updated today (2010.02.23)

msf > use auxiliary/sniffer/psnuffle 
msf auxiliary(psnuffle) > set RHOST imap.plus.net
RHOST => imap.plus.net
msf auxiliary(psnuffle) > use
Usage: use module_name

The use command is used to interact with a module of a given name.
msf auxiliary(psnuffle) > run
[*] Auxiliary module execution completed
msf auxiliary(psnuffle) > 
[*] Loaded protocol FTP from /Users/xyberpix/Tools/msf3/data/exploits/psnuffle/ftp.rb...
[*] Loaded protocol IMAP from /Users/xyberpix/Tools/msf3/data/exploits/psnuffle/imap.rb...
[*] Loaded protocol POP3 from /Users/xyberpix/Tools/msf3/data/exploits/psnuffle/pop3.rb...
[*] Loaded protocol URL from /Users/xyberpix/Tools/msf3/data/exploits/psnuffle/url.rb...
[*] Sniffing traffic.....
[-] Auxiliary failed: RuntimeError en0: no IPv4 address assigned
[-] Call stack:
[-]   /Users/xyberpix/Tools/msf3/lib/msf/core/exploit/capture.rb:100:in `setfilter'
[-]   /Users/xyberpix/Tools/msf3/lib/msf/core/exploit/capture.rb:100:in `open_pcap'
[-]   (eval):102:in `run'

On 24 Feb 2010, at 14:32, xyberpix wrote:

Thanks HD,

Unfortunately I'm still not getting it though, can you be a bit more
specific?

TIA
xyberpix

On 2/24/2010 2:42 AM, xyberpix wrote:
I've got libpcap installed, and I also tried adding the rb-pcap via
ports, and also adding it via gem as well, and well nothing seemed to
work. I'm pretty sure that this is something really obvious, but has
anyone got any idea on how to resolve it?

Install pcaprub from external/pcaprub/

$ ruby extconf.rb
$ make
$ sudo make install
_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework



_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework

_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework


Current thread: