0%

msf && armitage

环境

OS: Debian GNU/Linux 10

安装msf和armitage

新建一个用户 issue

adduser d2x3

visudo 打开 /etc/sudoers, 添加

d2x3    ALL=(ALL:ALL) ALL

安装msf

curl https://raw.githubusercontent.com/rapid7/metasploit-omnibus/master/config/templates/metasploit-framework-wrappers/msfupdate.erb > msfinstall && \
chmod 755 msfinstall && \
./msfinstall

切换到d2x3用户

su d2x3

msfconsole # 按照提示初始化数据库

在服务器上下载并运行teamserver

sudo apt install openjdk-11-jre # 安装openjdk

/opt/metasploit-framework/embedded/bin/postgres -D /home/d2x3/.msf4/db -p 5433 # 启动数据库(如果此前运行了msfconsole,则不需要执行这个)

wget https://github.com/dzxs/armitage/releases/download/v1.4.11/armitage.tgz # 下载armitage

tar xzvf armitage.tgz # 解压

cd armitage

export MSF_DATABASE_CONFIG=/home/d2x3/.msf4/database.yml

sudo -E ./teamserver {外网ip} {密码}

# 运行成功出现提示
[*] Use the following connection details to connect your clients:
Host: {外网ip}
Port: 55553
User: msf
Pass: {密码}

在终端电脑打开armitage

linux

wget https://github.com/dzxs/armitage/releases/download/v1.4.11/armitage.tgz # 下载armitage

tar xzvf armitage.tgz # 解压

cd armitage

./armitage

# 没有java环境根据发行版自行安装撒

macos

wget https://github.com/dzxs/armitage/releases/download/v1.4.11/armitage.dmg

windows

下载

连接teamserver

参数填入刚刚在服务器端运行teamserver成功时出现的提示内容

常见问题

假如有以下warning

perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
LANGUAGE = (unset),
LC_ALL = (unset),
LC_CTYPE = "zh_CN.UTF-8",
LANG = "en_US.UTF-8"
are supported and installed on your system.
perl: warning: Falling back to a fallback locale ("en_US.UTF-8").
locale: Cannot set LC_CTYPE to default locale: No such file or directory
locale: Cannot set LC_ALL to default locale: No such file or directory

执行

locale-gen en_US.UTF-8
dpkg-reconfigure locales

~/.zshrc~/.bashrc添加

export LANGUAGE=en_US.UTF-8
export LANG=en_US.UTF-8
export LC_ALL=en_US.UTF-8

假如出现

[*] Warning: Uncaught exception: java.lang.RuntimeException: I can not find a database.yml file. I *really* need it.

执行

export MSF_DATABASE_CONFIG=/home/d2x3/.msf4/database.yml

欢迎关注我的其它发布渠道