oracle login_brute module

[alfonso.caponi at gmail.com (alfonso caponi)]

Hi,

I have followed all the document.

root at srv:/opt/oracle/instantclient_10_2# ls -la
total 102428
drwxr-xr-x 3 root root     4096 2009-09-08 14:34 .
drwxr-xr-x 3 root root     4096 2009-09-08 16:38 ..
-rw-rw-r-- 1 root root      238 2008-02-17 09:57 BASIC_README
-r--r--r-- 1 root root  1609607 2008-02-17 09:57 classes12.jar
-rwxrwxr-x 1 root root    67766 2008-02-17 09:57 genezi
-r--r--r-- 1 root root     1525 2008-02-17 09:58 glogin.sql
lrwxrwxrwx 1 root root       17 2009-09-08 14:34 libclntsh.so ->
libclntsh.so.10.1
-rwxrwxr-x 1 root root 19076649 2008-02-17 09:57 libclntsh.so.10.1
-r-xr-xr-x 1 root root  5656445 2008-02-17 09:57 libnnz10.so
-rwxrwxr-x 1 root root  1398244 2008-02-17 09:57 libocci.so.10.1
-rwxrwxr-x 1 root root 72698427 2008-02-17 09:57 libociei.so
-r-xr-xr-x 1 root root   120443 2008-02-17 09:57 libocijdbc10.so
-r-xr-xr-x 1 root root  1434263 2008-02-17 09:58 libsqlplusic.so
-r-xr-xr-x 1 root root  1069221 2008-02-17 09:58 libsqlplus.so
-r--r--r-- 1 root root  1555682 2008-02-17 09:57 ojdbc14.jar
drwxrwxr-x 4 root root     4096 2008-02-17 09:58 sdk
-r-xr-xr-x 1 root root     8903 2008-02-17 09:58 sqlplus
-rw-rw-r-- 1 root root      242 2008-02-17 09:58 SQLPLUS_README

sql.rb doesn't works :(

[-] The Oracle Database Instant Client has not been installed

Thank you for your help


2009/9/8 c0lists <lists at carnal0wnage.com>

> did you follow the rest of the instruction and install the correct
> libraries?
>
> is your instantclient at /opt/oracle/instantclient_10_2 ?
>
> does the regular sql.rb module work?
>
> -CG
>
> On Tue, Sep 8, 2009 at 9:49 AM, alfonso caponi <alfonso.caponi at gmail.com>wrote:
>
> > Hi list,
> >
> > I would like use oracle modules with msf v3.3-dev (rev. 7009) on my Ubuntu
> > hardy x86.
> >
> > To start I installed the following packages:
> >
> > ruby1.8
> > ruby1.8-dev
> > libdbi-ruby1.8
> >
> > I followed the document https://metasploit.com/trac/wiki/OracleUsage and
> > I installed these packages (sqlplus works fine):
> >
> > *Instant Client Package - Basic
> > *Instant Client Package - SDK (devel)
> > *Instant Client Package - SQL*Plus
> >
> > # sqlplus
> >
> > SQL*Plus: Release 10.2.0.4.0 - Production on Tue Sep 8 15:36:44 2009
> > ...
> > ..
> >
> >
> > I added these rows into .bashrc:
> >
> > export PATH=$PATH:/opt/oracle/instantclient_10_2
> > export SQLPATH=/opt/oracle/instantclient_10_2
> > export TNS_ADMIN=/opt/oracle/instantclient_10_2
> > export LD_LIBRARY_PATH=/opt/oracle/instantclient_10_2
> > export ORACLE_HOME=/opt/oracle/instantclient_10_2
> >
> > env | grep LD_LIBRARY_PATH
> > LD_LIBRARY_PATH=/opt/oracle/instantclient_10_2/
> >
> >
> > but... "admin/oracle/login_brute" doesn't works! :(
> >
> >
> > msf > use admin/oracle/login_brute
> > msf auxiliary(login_brute) > set RHOST 192.168.1.100
> > RHOST => 192.168.1.100
> > msf auxiliary(login_brute) > exploit
> >
> > [*] Connecting to 192.168.1.100:1521/ORCL...
> > [-] The Oracle Database Instant Client has not been installed
> > [*] Auxiliary module execution completed
> >
> > Can you help me please?
> >
> > Thank you very much,
> > AL
> >
> > _______________________________________________
> > https://mail.metasploit.com/mailman/listinfo/framework
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.metasploit.com/pipermail/framework/attachments/20090908/7295c690/attachment.html>