autopwn sessions not working

[T3rminator]

So i installed backtrack5, i wanted to see it's power so i setted up a windows 2003 server with some outdated services. I updated my backtrack and metasploit framework, and i setted up the mysql data base, after i was sucsessfully connected i did this:

db_nmap 10.20.10.1 -O
db_autopwn -e -x -p -t

It found over 600 possible exploits. After it ran it all it did sessions and i had 46 sessions, so i thought i had rooted it.

However the list contained; bsd, php, unix, osx and windows shells. I don't really get how i can have bsd shells on a windows box, but what ever. I tried them all with sessions -i [number] but they all said something like:
"interacting with shell 3" and then it went inresponsive and i had no output at all.

Whats happening here?

tanks.

[koning]

So i installed backtrack5, i wanted to see it's power so i setted up a windows 2003 server with some outdated services. I updated my backtrack and metasploit framework, and i setted up the mysql data base, after i was sucsessfully connected i did this:

db_nmap 10.20.10.1 -O
db_autopwn -e -x -p -t

It found over 600 possible exploits. After it ran it all it did sessions and i had 46 sessions, so i thought i had rooted it.

However the list contained; bsd, php, unix, osx and windows shells. I don't really get how i can have bsd shells on a windows box, but what ever. I tried them all with sessions -i [number] but they all said something like:
"interacting with shell 3" and then it went inresponsive and i had no output at all.

Whats happening here?

tanks.

I have got the same issue... usually on port 21 (FTP) in manage to start a session to the victim, but when I interact with the shell, I can type whatever I want, but just get to see the $.
I figured this was because I was stuck in the FTP chroot as user anonymous?

Anyone?

[sasanet]

stupid question:
are u using iptables or some sort of firewall?
if so flush them.

[koning]

stupid question:
are u using iptables or some sort of firewall?
if so flush them.

Firewall allows all outgoing traffic and denies incoming... I assume I don't need to put my backtrack system in the DMZ? Traffic would originate from my system and therefore open up the connection?

[bsmartt]

Have you tried using metasploit to execute a single exploit manually against the target system or have you only tried to autopwn the target? db_autopwn is now deprecated (http://dev.metasploit.com/redmine/is...6#change-23031), and Rapid7's official answer to ANY questions about db_autopwn is "do not use db_autopwn". It's safe to say that any information autopwn tells you can no longer be trusted.

[theAud1t0r]

Will they be implementing any alternate tools upon db_autopwn deprecation?

[scottm99]

I'd post that question on the metasploit mailing list...most of the dev team is on it (including HD Moore).

[zimmaro]

hi,
this is the same questions:
http://www.backtrack-linux.org/forum...ad.php?t=46338
regards zimmaro

[biffle35]

This really stinks that they're taking db_autopwn out of Metasploit. Is this a ploy to buy the professional version? I hope H.D. isn't losing his baby.

[scottm99]

The short story is that db_autopwn was not deemed stable and robust enough to stay in the framework. From all I've read (and I asked some guys at the Rapid7 booth at DerbyCon) they are committed to keeping MSF free & up-to-date. db_autopwn was always hit-or-miss with me...mostly miss

As an aside, db_autopwn was removed from the svn trunk some time ago.