Metasploit自动连接postgresql

时间:2016-02-17 22:12:53   收藏:0   阅读:9348

1. 启动postgresql

root@kali:~# service postgresql start

2. 设置用户与数据库

root@kali:~# su postgres
postgres@kali:/root$ createuser msf4 -P
Enter password for new role:
Enter it again:
postgres@kali:/root$ createdb --owner=msf4 msf4
postgres@kali:/root$ exit
exit
root@kali:~#

3. 测试数据库连接状态

root@kali:~# msfconsole
### ###

msf > db_connect msf4:password@localhost/msf4
[*] Rebuilding the module cache in the background...
msf > db_status
[*] postgresql connected to msf4
msf > search 2015-0531
[!] Module database cache not built yet, using slow search #这里要稍等一下才会正常,可以考虑关闭应用重启一下

msf > 

4. 设置自动连接

自动连接可以通过配置文件 /usr/share/metasploit-framework/config/database.yml 完成,内容可以通过复制database.yml.example并修改内容来完成设置。

root@kali:/usr/share/metasploit-framework/config# cp database.yml.example database.yml
root@kali:/usr/share/metasploit-framework/config# vi database.yml
root@kali:/usr/share/metasploit-framework/config# cat database.yml
# Please only use postgresql bound to a TCP port.
# Only postgresql is supportable for metasploit-framework
# these days. (No SQLite, no MySQL).
#
# To set up a metasploit database, follow the directions hosted at:
# http://r-7.co/MSF-DEV#set-up-postgresql
development: &pgsql
  adapter: postgresql
  database: msf3 #主要该红色的这三个值
  username: msf3
  password: jinchangkun
  host: localhost
  port: 5432
  pool: 5
  timeout: 5

# You will often want to seperate your databases between dev
# mode and prod mode. Absent a production db, though, defaulting
# to dev is pretty sensible for many developer-users.
production: &production
  <<: *pgsql

# Warning: The database defined as "test" will be erased and
# re-generated from your development database when you run "rake".
# Do not set this db to the same as development or production.
#
# Note also, sqlite3 is totally unsupported by Metasploit now.
test:
  <<: *pgsql
  database: metasploit_framework_test
  username: metasploit_framework_test
  password: ___________________________

重新执行msfconsole即可直接链接数据库

root@kali:~# msfconsole
### ###

msf > db_status
[*] postgresql connected to msf4
msf > search CVE-2015-0311

Matching Modules
================

   Name                                                   Disclosure Date  Rank   Description
   ----                                                   ---------------  ----   -----------
   exploit/multi/browser/adobe_flash_uncompress_zlib_uaf  2014-04-28       great  Adobe Flash Player ByteArray UncompressViaZlibVariant Use After Free

msf > 

5. . .

之前遇到过填database.yml内容无效的版本,是通过在用户的家目录下创建配置文件完成的,等遇到类似的再补充。

评论(0
© 2014 mamicode.com 版权所有 京ICP备13008772号-2  联系我们:gaon5@hotmail.com
迷上了代码!