Problem in Installation - Armitage

Problem while Connection Mysql Database

solution

1)msf > db_driver

2)msf > db_driver mysql

3)root@bt:/pentest/exploits/framework3# mysql -u root -p

4)mysql> CREATE USER msf3@localhost IDENTIFIED BY 'test';

5)mysql> CREATE DATABASE msf3;

6)mysql> GRANT ALL PRIVILEGES ON msf3.* TO msf3@localhost;


Another Problem while Installing if you are using sqlite3
then

root@bt:/pentest/exploits/armitage# ./armitage.sh

password is blank i.e

DB Connect String -

Armitage Setup

To install Armitage in BackTrack,

1)root@bt:~# apt-get update

2)root@bt:~# apt-get install armitage

3)root@bt:~# msfrpcd -f -U msf -P test -t Basic

4)root@bt:~# /etc/init.d/mysql start



5)root@bt:/pentest/exploits/armitage# ./armitage.sh


In BackTrack, the default MYSQL credentials are root / toor and for PostgreSQL,
if using sqlite3 credential is blank password

6)select the "Use SSL" checkbox, verify the rest of the settings and click "Connect".

Microsoft DRM technology (msnetobj.dll) ActiveX Multiple Remote Vulnerabilities

Detail of POC can be viewed
http://www.exploit-db.com/exploits/15061/
http://www.securityfocus.com/bid/43345/info

Microsoft DRM technology (msnetobj.dll) ActiveX Multiple Remote Vulnerabilities
by

Asheesh Kumar Mani Tripathi


# Vulnerability Discovered By Asheesh kumar Mani Tripathi

# email informationhacker08@gmail.com

# company www.aksitservices.co.in

# Credit by Asheesh Anaconda

# Date 18th Sep 2010

# Description: Microsoft DRM technology (msnetobj.dll) ActiveX suffers from multiple remote vulnerabilities such as buffer overflow, integer overflow and denial of service (IE crash). This issue is triggered when an attacker convinces a victim user to visit a malicious website.

The "GetLicenseFromURLAsync" function does not handle input correctly.
Remote attackers may exploit this issue to execute arbitrary machine code in the context of the affected application, facilitating the remote compromise of affected computers. Faile exploit attempts likely result in browser crashes.

Detail of POC can be viewed
link:http://www.exploit-db.com/exploits/15061/
link:http://www.securityfocus.com/bid/43345/info

Problem :No Internet in Backtrack 4

Problem :No Internet in Backtrack 4 BT4

1)start the Network ..

In command line type
bt# /etc/init.d/networking start

or Menu -> Services -> NETWORK -> Start NETWORK

Then Configure Network Card

Static IP address

ifconfig eth0 192.168.1.2

For variable subnet mask
ifconfig eth0 192.168.1.2 netmask 255.255.255.224


Add a default gateway:

route add default gw 192.168.1.1 eth0

Replace the IP address with your default gateways


Assign DNS servers:

echo nameserver 200.1.1.1 > /etc/resolv.conf


For DHCP

dhcpcd eth0

Metasploit db_create error

msf > db_create
[-]
[-] Warning: The db_create command is deprecated, use db_connect instead.
[-] The database and schema will be created automatically by
[-] db_connect. If db_connect fails to create the database, create
[-] it manually with your DBMS's administration tools.

Solution
Just use

msf > db_driver sqlite3

or
msf > db_connect

Installing Oracle Client using TOAD

1)Install the oracle instant client. (instantclient_10_2)
Unzip the files to a directory, and then copy the path of this directory to the clipboard.

2)Add this directory to the PATH environmental variable.
right click on My Computer, go to the Advanced tab, and click 'Environment Variables'. Under System variables, find 'Path'. Select it, and click edit. ctrl-v to paste the directory into the string, and say OK. e.g.:

Before:C:\Perl\bin\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\Common Files\Roxio Shared\DLLShared\;C:\Program Files\Common Files\Roxio Shared\10.0\DLLShared\

After: C:\Perl\bin\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\Common Files\Roxio Shared\DLLShared\;C:\Program Files\Common Files\Roxio Shared\10.0\DLLShared\;C:\instantclient_10_2


3)In the same window, under 'User variables for ...', Click the New button. Call the variable 'TNS_ADMIN'. ctrl-v to paste the directory path into the 'variable value' field. Say OK, and close out the 'My Computer' properties windows.

e.g Varaible name TNS_ADMIN
variable value C:\instantclient_10_2


4)Create a file called 'TNSNAMES.ORA' in your instant client installation directory. In this file designate the connection parameters for your database. Mine looked something like this:

DB_ALIAS =
(DESCRIPTION =
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = TCP)(HOST = ip.add.re.ss)(PORT = 1521))
)
(CONNECT_DATA =
(SID = orcl)
(SERVER = DEDICATED)
)
)

replace the DB_ALIAS, ip.add.re.ss, port, and SID with your settings.


5)Reset your computer, fire up Toad, and then open a new connection. You should see DB_ALIAS as an option under the database field. Set your username and password, hit connect

File association fixes for Windows Vista

his page contains the file association fixes for some of the most common file types. The fixes are applicable for Windows® Vista systems only.

http://www.winhelponline.com/articles/105/1/File-association-fixes-for-Windows-Vista.html


Broken EXE Association

Executable (.EXE) files are the programs you run for most tasks on a computer. Now and again someone reports that they have, in error, assigned some other program to the .EXE extension without first establishing a System Restore Point so they can recover from making this error. When that happens little will run on the computer. Instead, when an .EXE file is clicked some program will start and attempt to process that file instead.

http://filext.com/faq/broken_exe_association.php