Thursday, June 17, 2010

Backtrack 4 and FastTrack

For those that like to use FastTrack for pentesting, if you recently did an update to metasploit, it's now at v3.41 which seems to have changed a few things and breaks the FT scripts. I'm not sure what changed with postgresql, but the easy fix is to set Metasploit to use sqlite3

Edit the file at  /pentest/exploits/fasttrack/bin/ftsrc/autopwn.py
go to the section where this comment is   # load sqlite3


Add the following on the next line    child1.sendline ('db_driver sqlite3')

So the section will look like this

try:
   child1 = pexpect.spawn('%smsfconsole' % (metapath))
# load sqlite3
   child1.sendline ('db_driver sqlite3')
 #  child1.sendline ('load driver sql3')

And what the heck happened to http://www.thepentest.com  ? what, no more fasttrack updates? That sucks.

Wednesday, January 13, 2010

Backtrack4 Pre release and SpoonWEP

Looking for spoonwep.lzm and spoonwpa.lzm? don't have lzm2dir on Backtrack4, I have you covered.

I installed the BT4 pre and also discovered several things, no lzm2dir, no spoonwep/wpa etc. I searched to find out what to do and find no simple way of installing it, so I made my own scripts and repackaged spoonwep and spoonwpa into a tar file seeing how lzm is a pain on the BT4 pre. Simply download spoon.tar.gz  then enter.... OK, the dorks at mediafire deleted my file, so I uploaded it again.

tar -xvf spoon.tar.gz
./doit.sh

and in a few short minutes, you will have spoonwep2 and spoonwpa installed on BT4 Pre. What is doit.sh doing? copying the files from the usr directory to your usr directory, change permissions on one spoon file, creating the menu entries

Now how hard was that?

Word.... The Cheapbyte!