Howto: Install Metasploit 3.1 svn in Ubuntu Hardy Heron

The Metasploit Framework is a development platform for creating security tools and exploits. The framework is used by network security professionals to perform penetration tests, system administrators to verify patch installations, product vendors to perform regression testing, and security researchers world-wide. The framework is written in the Ruby programming language and includes components written in C and assembler.

The framework consists of tools, libraries, modules, and user interfaces. The basic function of the framework is a module launcher, allowing the user to configure an exploit module and launch it at a target system. If the exploit succeeds, the payload is executed on the target and the user is provided with a shell to interact with the payload.

This is a tool that I pentest my lan with and can be used to hack remote computers/networks or whatever, I will show you how to get this setup and installed in Ubuntu Hardy very easily:

First lets install the Dependencies:
sudo apt-get install build-essential ruby libruby rdoc libyaml-ruby libzlib-ruby libopenssl-ruby libdl-ruby libreadline-ruby libiconv-ruby rubygems sqlite3 libsqlite3-ruby libsqlite3-dev irb subversion

Lets grab rubygems and install it because the ubuntu package is crap.

wget http://rubyforge.org/frs/download.php/11289/rubygems-0.9.0.tgz
tar -xvzf rubygems-0.9.0.tgz
cd rubygems-0.9.0
sudo ruby setup.rb
sudo gem install -v=1.1.6 rails


Now at last we can grab metasploit:
svn co http://metasploit.com/svn/framework3/trunk/ metasploit
Lets load cd to the metasploit dir, and update it, I do this before executing every time.
cd metasploit
Update Metasploit exploits/modules/payloads/package
svn up
Lets Startup Metasploit
./msfconsole

Learn more about metasploit here

Comments (5)

Loading... Logging you in...
  • Logged in as
Your demo is basically only using nmap and has very little to do with metasploit. maybe you could give an example of *why* someone would care to use metasploit instead of just invoking nmap by hand. (Maybe show the example of db_autopwn -p -t -e)
I changed it to just a howto install
thats good tanks for this easy install
I had msfconsole working without any of this! msfgui is what requires all the ruby stuff and it still isn't working. Says it needs ruby-gtk2 and ruby-libglade2 which are both only available in rpms.
BTW I tried using alien to make debs, they istalled fine but msfgui still gives the same error. Now I have a crap load of stuff installed on my system that I didn't even need!
All I had to do was install the backward named gtk2-ruby and libglade2-ruby packages from synaptic and it's working. That's why I couldn't find the packages. Why do you say ubuntu package is crap? It seems to work fine now. I think you should add those two packages to the apt-get install at the beginning so we have a gui.

Post a new comment

Comments by

Clicky Web Analytics