Tutorial de Navegação Rápido em Exploit-db www.exploit-db.com

[firebits]

Este é apenas um pequeno comentário sobre de como usar o exploit-db.

Adicionando um Add-on de Firefox do Exploit-DB:

Exploit-DB Search Browser Plugin

Atualizando:

Pode ser feito, clicando no menu -> Backtrack -> Penetration -> ExploitDB -> Update Exploitdb

ou manualmente via subversion

Code:
svn co svn://devel.offensive-security.com/exploitdb
Navegando:

Procurar no script searchsploit faz a busca por exploits muito fácil!

Code:
root@bt:/pentest/exploits/exploitdb# ./searchsploit
Usage: searchsploit [term1] [term2]
Example: searchsploit apache local
Use lower case in the search terms; second term is optional
Looking for ms08-067:

Code:
root@bt:/pentest/exploits/exploitdb# ./searchsploit ms08-067
Description Path
--------------------------------------------------------------------------- -------------------------
MS Windows Server Service Code Execution PoC (MS08-067) /windows/dos/6824.txt
MS Windows Server Service Code Execution Exploit (MS08-067) (Univ) /windows/remote/6841.txt
MS Windows Server Service Code Execution Exploit (MS08-067) /windows/remote/7104.c
MS Windows Server Service Code Execution Exploit (MS08-067) (2k/2k3) /windows/remote/7132.py
Looking for Apache exploits on Windows platform:

Code:
root@bt:/pentest/exploits/exploitdb# ./searchsploit apache windows
Description Path
--------------------------------------------------------------------------- -------------------------
Apache HTTP Server 2.x Memory Leak Exploit /windows/dos/9.c
Apache Mod_Rewrite Off-by-one Remote Overflow Exploit (win32) /windows/remote/3680.sh
Apache 2.0.58 mod_rewrite Remote Overflow Exploit (win2k3) /windows/remote/3996.c
mod_jk2 v2.0.2 for Apache 2.0 Remote Buffer Overflow Exploit (win32) /windows/remote/5330.c
Bea Weblogic Apache Connector Code Exec / Denial of Service Exploit /windows/remote/6089.pl
Apache mod_jk 1.2.19 Remote Buffer Overflow Exploit (win32) /windows/remote/6100.py
Apache Tomcat runtime.getRuntime().exec() Privilege Escalation (win) /windows/local/7264.txt

Looking for Adobe 9.1.2 exploit and copying it to our root directory and renaming it to adobe:

Code:
root@bt:/pentest/exploits/exploitdb# ./searchsploit adobe 9.1.2
Description Path
--------------------------------------------------------------------------- -------------------------
Adobe Acrobat 9.1.2 NOS Local Privilege Escalation Exploit /windows/local/9223.txt
Adobe Acrobat 9.1.2 NOS Local Privilege Escalation Exploit (py) /windows/local/9272.py

root@bt:/pentest/exploits/exploitdb# cp platforms/windows/local/9272.py /root/adobe.py

Fonte:http://www.backtrack-linux.org/forum...-tutorial.html


Traduzido e Adaptado por firebits
http://www.backtrack-linux.org/forum.../firebits.html

[sygo_]

Pessoal,

No ultimo update do exploit-db o file .csv mudou de syntax, algo minimo mas que acabou por tornar o searchsploit inutil. Se nao quiserem esperar pelo update no repositorio do backtrack (pode demorar algum tempo) podem fazer o download manualmente aqui:


Source Checkout - searchsploit - Project Hosting on Google Code


Para alem de corrigir esse problema a nova versão aumenta o numero de termos de pesquisa para 3.