标签：安全 渗透 metasploit
实验环境
centos6.5_x64
实验软件
pgdg-centos94-9.4-1.noarch.rpm
yaml-0.1.7.tar.gz
ruby-2.2.5.tar.gz
nmap-7.12.tar.bz2
metasploit-framework.git
软件安装
rpm -ivh pgdg-centos94-9.4-1.noarch.rpm
yum install -y postgresql94-server postgresql94-devel postgresql94
yum groupinstall -y ‘Development Tools‘
yum install -y sqlite-devel libxslt-devel libxml2-devel java-1.7.0-openjdk libpcap-devel nano openssl-devel zlib-devel libffi-devel gdbm-devel readline-devel nano wget git
tar zxvf yaml-0.1.7.tar.gz
cd yaml-0.1.7
./configure --prefix=/usr/local/
make
make install
tar zxvf ruby-2.2.5.tar.gz
cd ruby-2.2.5
./configure --prefix=/usr/local --with-opt-dir=/usr/local/lib
make
make install
tar jxvf nmap-7.12.tar.bz2
cd nmap-7.12
./configure
make
make install
exclude=postgresql*
service postgresql-9.4 initdb
service postgresql-9.4 start
chkconfig --level 35 postgresql-9.4 on
echo export PATH=/usr/pgsql-9.4/bin:$PATH >> /etc/bashrc
source ~/.bashrc
su - postgres
-bash-4.1$ createuser msf -P -S -R -D
Enter password for new role:
Enter it again:
createdb -O msf msf
exit
cp /var/lib/pgsql/9.4/data/pg_hba.conf /var/lib/pgsql/9.4/data/pg_hba.conf.bak
vim /var/lib/pgsql/9.4/data/pg_hba.conf
77 # TYPE DATABASE USER ADDRESS METHOD
78
79 # "local" is for Unix domain socket connections only
80 local all all md5
81 # IPv4 local connections:
82 host all all 127.0.0.1/32 md5
83 # IPv6 local connections:
84 host all all ::1/128 md5
85 # Allow replication connections from localhost, by a user with thed
86 # replication privilege.
87 #local replication postgres peer
88 #host replication postgres 127.0.0.1/32 ident
89 #host replication postgres ::1/128 ident
service postgresql-9.4 restart
cd /opt/
git clone https://github.com/rapid7/metasploit-framework.git
cd metasploit-framework
bash -c ‘for MSF in $(ls msf*); do ln -s /opt/metasploit-framework/$MSF /usr/local/bin/$MSF;done‘
ln -s /opt/metasploit-framework/armitage /usr/local/bin/armitage
gem install wirble pg sqlite3 msgpack activerecord redcarpet rspec simplecov yard bundler
bundle install
Don‘t run Bundler as root. Bundler can ask for sudo if it is needed, and installing your bundle as root will
break this application for all non-root users on this machine.
Fetching gem metadata from https://rubygems.org/...........
Fetching version metadata from https://rubygems.org/..
Fetching dependency metadata from https://rubygems.org/.
Resolving dependencies...
Installing rake 11.2.2
Using i18n 0.7.0
Installing json 1.8.3 with native extensions
Installing minitest 5.9.0
Using thread_safe 0.3.5
Installing builder 3.2.2
Installing erubis 2.7.0
Installing mini_portile2 2.1.0
.............
vim /opt/metasploit-framework/database.yml
production:
adapter: postgresql
database: msf
username: msf
password: abc123
host: 127.0.0.1
port: 5432
pool: 75
timeout: 5
netstat -tuplna | grep 5432
tcp 0 0 127.0.0.1:5432 0.0.0.0:* LISTEN 30767/postmaster
tcp 0 0 ::1:5432 :::* LISTEN 30767/postmaster
echo export MSF_DATABASE_CONFIG=/opt/metasploit-framework/database.yml >> /etc/bashrc
source ~/.bashrc
验证
msfconsole
本文出自 “IT” 博客，请务必保留此出处http://wang3781.blog.51cto.com/9428009/1857754
标签：安全 渗透 metasploit
原文地址：http://wang3781.blog.51cto.com/9428009/1857754
