[nexpose-users] error when connecting nexpose instance

[Errol Fagone]

If you cannot create additional users in the community edition, you will need to change your nxadmin password. You should be able to do this by clicking on your nxadmin username in the upper-right corner of the screen, right below the 'Log Out' button.

As for requirements, I believe the problem only lies with the special characters, so keep the password to letters and numbers (both upper and lower case is fine)

Thanks,
Errol

From: Eddie Akemu [mailto:eakemu at hotmail.com]
Sent: Tuesday, March 02, 2010 1:52 PM
To: Errol Fagone; nexpose-users at lists.rapid7.com
Subject: RE: [nexpose-users] error when connecting nexpose instance

Errol

Yes it does.How do I change it and what are the requirements for a password ?


Eddie Akemu
CISSP







________________________________
From: Errol_Fagone at rapid7.com
To: eakemu at hotmail.com; nexpose-users at lists.rapid7.com
Date: Tue, 2 Mar 2010 13:46:12 -0500
Subject: RE: [nexpose-users] error when connecting nexpose instance
Does your NeXpose password contain special characters? I have seen this before and creating a separate user in NeXpose for Metasploit without the use of special characters in your password helped solve the problem. Let us know if your password doesn't even contain special characters though...

Thanks,
Errol

From: nexpose-users-bounces at lists.rapid7.com [mailto:nexpose-users-bounces at lists.rapid7.com] On Behalf Of Eddie Akemu
Sent: Tuesday, March 02, 2010 1:05 PM
To: nexpose-users at lists.rapid7.com
Subject: [nexpose-users] error when connecting nexpose instance

Hi

I get this when i connect to nexpose

[*] NeXpose integration has been activated
[*] Successfully loaded plugin: nexpose
resource (./NeXpose.rc)> nexpose_connect nxadmin:nxadmin at 127.0.0.1:3780
[*] Connecting to NeXpose instance at 127.0.0.1:3780 with username nxadmin...
[-] Error while running command nexpose_connect: #<RuntimeError: Illegal character '&' in raw string "
         document.write('\u003ca href="');
         document.write(document.nxp.skin.getVendorSite());
         document.write('"\u003e');
         document.write(document.nxp.skin.getVendorName());
         document.write('\u003c/a\u003e, ');
         document.write(document.nxp.skin.getVendorAddress());
         var supportHelpURL = document.nxp.skin.getSupportHelpURL(

all stack:
/usr/lib/ruby/1.8/rexml/parsers/treeparser.rb:92:in `parse'
/usr/lib/ruby/1.8/rexml/document.rb:228:in `build'
/usr/lib/ruby/1.8/rexml/document.rb:43:in `initialize'
/opt/metasploit3/msf3/plugins/nexpose.rb:506:in `new'
/opt/metasploit3/msf3/plugins/nexpose.rb:506:in `parse_xml'
/opt/metasploit3/msf3/plugins/nexpose.rb:545:in `execute'
/opt/metasploit3/msf3/plugins/nexpose.rb:589:in `execute'
/opt/metasploit3/msf3/plugins/nexpose.rb:810:in `execute'
/opt/metasploit3/msf3/plugins/nexpose.rb:791:in `login'
/opt/metasploit3/msf3/plugins/nexpose.rb:104:in `cmd_nexpose_connect'
/opt/metasploit3/msf3/lib/rex/ui/text/dispatcher_shell.rb:239:in `send'
/opt/metasploit3/msf3/lib/rex/ui/text/dispatcher_shell.rb:239:in `run_command'
/opt/metasploit3/msf3/lib/rex/ui/text/dispatcher_shell.rb:201:in `run_single'
/opt/metasploit3/msf3/lib/rex/ui/text/dispatcher_shell.rb:195:in `each'
/opt/metasploit3/msf3/lib/rex/ui/text/dispatcher_shell.rb:195:in `run_single'
/opt/metasploit3/msf3/lib/msf/ui/console/driver.rb:237:in `load_resource'
/opt/metasploit3/msf3/lib/msf/ui/console/driver.rb:232:in `each_line'
/opt/metasploit3/msf3/lib/msf/ui/console/driver.rb:232:in `load_resource'
/opt/metasploit3/msf3/lib/msf/ui/console/driver.rb:156:in `initialize'
/opt/metasploit3/msf3/lib/msf/ui/console/driver.rb:155:in `each'
/opt/metasploit3/msf3/lib/msf/ui/console/driver.rb:155:in `initialize'
./msfconsole:93:in `new'
./msfconsole:93

What is wrong ?

Kind regards
Eddie Akemu
CISSP




________________________________
Do you have a story that started on Hotmail? Tell us now<http://clk.atdmt.com/UKM/go/195013117/direct/01/>

________________________________
Got a cool Hotmail story? Tell us now<http://clk.atdmt.com/UKM/go/195013117/direct/01/>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.metasploit.com/pipermail/nexpose-users/attachments/20100302/50e4f38f/attachment.html>