Metasploit pcaprub fix in BT5

[scottm99]

I just installed BT5 (32-bit GNOME) and discovered this build did not have the pcaprub extensions installed. So, Metasploit won't do anything with the raw socket modules except give an error. In the interest of saving others time, below is a cut-and-paste from the Metasploit wiki on how to do this (Note that the Metasploit wiki says "# cd /pentest/svn/framework3/external/pcaprub", but that's incorrect for BT5)

# cd /pentest/exploits/framework3/external/pcaprub
# ruby extconf.rb
# make && make install

Hope this helps!

[DigiP]

Just tried this today and didn't work for me but I'm using the KDE x64 bit version of BT5. Not sure if that is an issue at this time and only works in 32bit versions. Will put in a bug report if I can't find any other solutions.

[DementiaPraecox]

You should try update msf but not by Package Manager but rather by msfupdate located in "Linux menu start" so to speak and then

# cd opt/framework3/msf3/external/pcaprub
# ruby extconf.rb && make && make install

I know that both paths point to the same location but trying with /pentest/exploits/... I just couldn't get it to work. Got errors again ang again.

After that open msfconsole with Befepgs's technique(http://www.backtrack-linux.org/forum...e-problem.html at the bottom):

# ruby /pentest/exploits/framework3/msfconsole

althoug I found this ineffective in my case so I tried:

# ruby /opt/framework3/msf3/msfconsole

Again these are pointing to the same directory, but with /pentest/... I tried so many times and nothing and with /opt/... just worked after first try and I tried to scan my network with 'ipidseq' and evertyting works great from now on. And I didn't downloaded any packages on my own. Everything provided by BT.

I think that this could be the method of setting pcaprub up and running msf varies on type of machine you have (not just x86/x64) and hardware that's inside, maybe how it's configured by BT during installation. It seems stupid but everyone has the same copy and most people do the same thing: install, reboot, update everything with package manager and start msf to check with one of the scanners if pcaprub is installed. And look how many possibilites there are to get around this problem and how many people found their own ways to set up everything. Of course there are lucky who have no problems with their computers and BT5.
But now I'm just thinkin' out loud.

[madper]

You should try update msf but not by Package Manager but rather by msfupdate located in "Linux menu start" so to speak and then

# cd opt/framework3/msf3/external/pcaprub
# ruby extconf.rb && make && make install

I know that both paths point to the same location but trying with /pentest/exploits/... I just couldn't get it to work. Got errors again ang again.

After that open msfconsole with Befepgs's technique(http://www.backtrack-linux.org/forum...e-problem.html at the bottom):

# ruby /pentest/exploits/framework3/msfconsole

althoug I found this ineffective in my case so I tried:

# ruby /opt/framework3/msf3/msfconsole

Again these are pointing to the same directory, but with /pentest/... I tried so many times and nothing and with /opt/... just worked after first try and I tried to scan my network with 'ipidseq' and evertyting works great from now on. And I didn't downloaded any packages on my own. Everything provided by BT.

I think that this could be the method of setting pcaprub up and running msf varies on type of machine you have (not just x86/x64) and hardware that's inside, maybe how it's configured by BT during installation. It seems stupid but everyone has the same copy and most people do the same thing: install, reboot, update everything with package manager and start msf to check with one of the scanners if pcaprub is installed. And look how many possibilites there are to get around this problem and how many people found their own ways to set up everything. Of course there are lucky who have no problems with their computers and BT5.
But now I'm just thinkin' out loud.

Same for me here, the only way to make pcaprub work with msf on my backtrack kde 32bit is using the method mentioned by DementiaPraecox above. Thanks for the post

[wark1tten]

You should try update msf but not by Package Manager but rather by msfupdate located in "Linux menu start" so to speak and then

# cd opt/framework3/msf3/external/pcaprub
# ruby extconf.rb && make && make install

I know that both paths point to the same location but trying with /pentest/exploits/... I just couldn't get it to work. Got errors again ang again.

After that open msfconsole with Befepgs's technique(http://www.backtrack-linux.org/forum...e-problem.html at the bottom):

# ruby /pentest/exploits/framework3/msfconsole

althoug I found this ineffective in my case so I tried:

# ruby /opt/framework3/msf3/msfconsole

Again these are pointing to the same directory, but with /pentest/... I tried so many times and nothing and with /opt/... just worked after first try and I tried to scan my network with 'ipidseq' and evertyting works great from now on. And I didn't downloaded any packages on my own. Everything provided by BT.

I think that this could be the method of setting pcaprub up and running msf varies on type of machine you have (not just x86/x64) and hardware that's inside, maybe how it's configured by BT during installation. It seems stupid but everyone has the same copy and most people do the same thing: install, reboot, update everything with package manager and start msf to check with one of the scanners if pcaprub is installed. And look how many possibilites there are to get around this problem and how many people found their own ways to set up everything. Of course there are lucky who have no problems with their computers and BT5.
But now I'm just thinkin' out loud.

this has been driving me nuts, thanks for the fix !

[scottm99]

Have you tried opening a terminal window & running msfconsole straight from the Metasploit directory? You may find the pcaprub extensions work properly then (they did for me).

[thed0ct0r]

Hi,
If anyone is still having problems with this (I couldn't find any answers in this or in any other thread) - even after doing the famous

cd /pentest/exploits/framework3/external/pcaprub
ruby extconf.rb && make && make install

For me, after doing this, msfconsole still would not load this library, and when i tried

gem install pcaprub

I got a symbol load error - which I was getting nowhere with...

Simple solution, when you run msfconsole - it actually runs a few scripts and then loads the console, one of them sets up the environment (/opt/framework3/scripts/setenv.sh).
so simple - after making and installing (which gives you a pcaprub.so file) you just add the path to it to the setenv.sh script to the RUBYLIB path.

so the whole thing is:

cd /pentest/exploits/framework3/external/pcaprub
ruby extconf.rb && make && make install

then:

gedit /opt/framework3/scripts/setenv.sh &

go down to where it says:

##### RUBY ENV #####
# Don't override GEM_PATH so users can install gems for the system ruby and
# they at least have a chance of working with ours
GEM_HOME="/opt/framework3/ruby/lib/ruby/gems/1.9.1"
RUBY_HOME="/opt/framework3/ruby"
RUBYLIB="..."

there will be a LOT of paths in RUBYLIB, separated by ":" just add ":/opt/framework3/msf3/external/pcaprub" to the end, close it, restart the console - and it should work fine. I tried it on both the gnome 32 and 64 bit releases of backtrack5.