[framework] SQL Pwnage issues

Trisk3t trisk3t at gmail.com
Tue Nov 30 08:46:33 PST 2010


I get a call stack when attempting to use the backupexec registry option in
MSF3 using MSFCONSOLE.
-------------------------------------

use auxiliary/admin/backupexec/registry

msf auxiliary(registry) > show options

Module options:

   Name   Current Setting   Required  Description
   ----   ---------------   --------  -----------
   RHOST  xxxxxxxx       yes       The target address
   RPORT  6106              yes       The target port
   WARN   xxxxxxxx       no        The warning to display for the Logon
Notice action

msf auxiliary(registry) > exploit

[*] Dumping system information...
[-] Auxiliary failed: Rex::ConnectionRefused The connection was refused by
the remote host (xxxxxxxxx:6106).
[-] Call stack:
[-]   /opt/metasploit3/msf3/lib/rex/socket/comm/local.rb:259:in
`create_by_type'
[-]   /opt/metasploit3/msf3/lib/rex/socket/comm/local.rb:32:in `create'
[-]   /opt/metasploit3/msf3/lib/rex/socket.rb:46:in `create_param'
[-]   /opt/metasploit3/msf3/lib/rex/socket.rb:53:in `create_tcp'
[-]   /opt/metasploit3/msf3/lib/rex/proto/dcerpc/client.rb:81:in
`socket_setup'
[-]   /opt/metasploit3/msf3/lib/rex/proto/dcerpc/client.rb:53:in
`socket_check'
[-]   /opt/metasploit3/msf3/lib/rex/proto/dcerpc/client.rb:40:in
`initialize'
[-]   /opt/metasploit3/msf3/lib/msf/core/exploit/dcerpc.rb:124:in `new'
[-]   /opt/metasploit3/msf3/lib/msf/core/exploit/dcerpc.rb:124:in
`dcerpc_bind'
[-]   (eval):210:in `backupexec_regrpc_call'
[-]   (eval):173:in `backupexec_regread'
[-]   (eval):122:in `system_info'
[-]   (eval):71:in `run'
[*] Auxiliary module execution completed
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.metasploit.com/pipermail/framework/attachments/20101130/c21f5f95/attachment.html>


More information about the framework mailing list