neet icon indicating copy to clipboard operation
neet copied to clipboard

medusa, metasploit not found but come preinstalled in kali

Open 007scorpio opened this issue 9 years ago • 10 comments

It working now but can't find medusa and metasploit, opens-nasl installation path...

007scorpio avatar Nov 22 '16 16:11 007scorpio

The installer sometimes says it can't find medusa even if it can. I'll remove that particular check. Metasploit integration won't work again until I patch it to use msfconsole instead of msfcli, which has been withdrawn by Rapid7. Openvas-nasl - that's strange. You can tell neet the location of openvas-nasl (and medusa if it's not already known) by doing this as root: echo openvas-nasl=/path/to/openvas-nasl >> /opt/neet/etc/locations You can do the same for medusa if it's not list in that file. I'll look into this issue.

JonnyHightower avatar Nov 22 '16 17:11 JonnyHightower

I'm facing the same issue.

On my Kali I have msfcli on /usr/share/framework2 folder, so I could point it there, but what variable do I use?

I don't see one for MSF on the locations file.

Now I do have OpenVAS but I can't seem to find openvas-nasl

jcmoreno avatar Nov 23 '16 04:11 jcmoreno

The format of the locations file is: executable=/path/to/executable "Executable" can be any executable on your system; those not used by neet will be ignored. You could add msfcli=/usr/share/framework2/msfcli but that's an ancient version of the Metasploit Framework, and the exploits in Neet (largely in /opt/neet/etc/vce.conf) were written for MSF3 and MSF4, before Rapid7 removed msfcli. I doubt very much that adding the above line would make anything better. I will be porting the exploitation commands to use the latest Metasploit Framework in the next few weeks so the msfcli issue shouldn't be around for long. As it couldn't find openvas-nasl at install, the installer should have built it for your system and put it at /opt/neet/pkg/bin/openvas-nasl. I'll look into this on my Kali build, but am running out of time this week so might not get a chance to fix it before next Monday/Tuesday. I will keep looking at it though. Cheers!

JonnyHightower avatar Nov 23 '16 09:11 JonnyHightower

Sounds good. I'll stay tuned. I'm glad that I saw g0tmi1k's post recommending this tool. It's very interesting.

The openvas-nasl wasn't built on mine. I'll just watch the repo.

Thanks!

jcmoreno avatar Nov 23 '16 16:11 jcmoreno

OK - it mostly works on Kali now. Openvas-nasl still doesn't build. I'll look at that next week. As I said, I still haven't fixed the Metasploit integration, but that will come over the next couple of weeks. I suggest you do a full re-install so the installer gets run from the beginning, rather than just doing a neet-update. To be honest, it's been a bit of a surprise to me that people have found Neet. I just put it here so work colleagues could download it a few years ago :) I didn't see g0tmi1k's post - just found it. Thanks for letting me know!

JonnyHightower avatar Nov 23 '16 22:11 JonnyHightower

Sounds good. I'll do that.

It's good stuff!

In the meantime, do you recommend another linux distribution that may be fully supported like Ubuntu?

jcmoreno avatar Nov 23 '16 23:11 jcmoreno

Installed nice on Parrot OS but run with errors...

007scorpio avatar Nov 24 '16 09:11 007scorpio

Well, Neet started out in its current form on Ubuntu 12.04. In terms of distro support, the main issue is just that package names differ between distros, and not everything Neet uses is available in all package repo's. Some stuff that isn't available in all repo's gets built by Neet at install time, but even that can fail if a dependency source package is missing. As far as I know, the Ubuntu 14.04 and 16.04 package lists are accurate, so it should install OK on those. I've never bothered using the non-LTS releases. I moved from Ubuntu to Mint a year or so back, so haven't actually tried Neet at all on 16.04 (though I've checked a sample of the package names online and they seem to be in Neet's list for 16.04). It worked great on 14.04 though. In general, I support what I'm using, which at the moment is Mint, but am happy to help with other Debian-based distros as the package management is pretty simple and reliable. Neet's biggest issue is the dependency on multiple tools that get deprecated and changed from one year to the next. As you may have realised, this is the first real development time I've put into it in the last couple of years, so it's taking a while to get it working seamlessly with newer library and tool versions etc. etc. Incidentally, openvas-nasl now builds on Kali, and gets installed in /opt/neet/pkg/bin/openvas-nasl.

JonnyHightower avatar Nov 24 '16 14:11 JonnyHightower

That's great. Thx for puting thia effort. I know that it might have been meant for a smaller audience initially.

I'll deploy it on Ubunt 14 and 16 to compare, and give Mint a whirl.

jcmoreno avatar Nov 24 '16 16:11 jcmoreno

Grande lavoro!!!

ghiocel30 avatar Nov 24 '16 23:11 ghiocel30