holms/install-metasploit-osx.md

## install-metasploit-osx.md

      
    Raw
  

              install-metasploit-osx.md
            
          
    Install Metasploit (with Armitage) on OSX Maverics

Requirements


Install Xcode - http://developer.apple.com/tools/xcode/
Install PostgreSQL - http://www.enterprisedb.com/products-services-training/pgdownload#osx

PostgreSQL

Install role

Open pgAdmin III.app, connect to the local postgresql server (user postgres, if it asks, & whatever password from above), right-click on Login Roles and select New Login Role...
Set the role name (this will be the username) to whatever you want or use msfuser
Under the definition tab, set the password to whatever you want or use msfpassword
Configure the database

Still in pgAdmin III.app, right-click on Databases and select New Database...
Set the database Name to whatever you want or use metasploitdb
Set the database Owner to the new user from above (msfuser in the example above)
Macports

Install MacPorts - http://www.macports.org/
Configure macports

Add /opt/local to your spotlight privacy settings to avoid excessive compile times & unnecessary indexing by spotlight.
Go to: System Preferences->Spotlight->Privacy->"+"
Press command+shift+G and type in /opt/local
Update with sudo port selfupdate
Quit terminal & relaunch to accept new path settings added by MacPorts
Metasploit

Install requirements

sudo port install ruby19 +nosuffix
sudo mv /opt/local/bin/ruby /opt/local/bin/ruby20
sudo ln -s /opt/local/bin/ruby1.9 /opt/local/bin/ruby
sudo gem update --system
sudo gem install pg -- --with-opt-include=/Library/PostgreSQL/9.3/include/ --with-opt-lib=/Library/PostgreSQL/9.3/lib/

Install the gsm msgpack with: sudo gem install msgpack
Install metasploit (with armitage)

sudo bash
cd /opt
git clone https://github.com/rapid7/metasploit-framework.git
mv metasploit-framework msf && cd msf
export PATH=/Library/PostgreSQL/9.3/bin/:$PATH # change to your postgresql version
bundle
ln -s /opt/msf/* /opt/local/bin
ln -s /opt/msf/armitage /opt/local/bin
Configure metasploit:

mkdir -p /opt/local/config
cat > /opt/local/config/database.yml

Add this:
# These settings are for the database used by the Metasploit Framework
# unstable tree included in this installer, not the commercial editions.
#

production:
  adapter: "postgresql"
  database: "metasploitdb"
  username: "msfuser"
  password: "msfpassword"
  port: 5432
  host: "localhost"
  pool: 256
  timeout: 5

Run Metasploit

Launch daemons, and connect to DB:
export MSF_DATABASE_CONF=/opt/local/config/database.yml
msfrpcd -U msfuser2 -P msfpassword2 -S -a 127.0.0.1 -t Msg 
msfconsole # open msf console and connect to db
msf> db_connect -y /opt/local/config/database.yml
msf> exit

Create msfrpcd a launchd service:
/Library/LaunchDaemons/org.metasploitframework.rpcd.plist
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
        <key>Disabled</key>
        <false/>
        <key>Label</key>
        <string>org.metasploitframework.rpcd</string>
        <key>RunAtLoad</key>
        <true/>
        <key>Debug</key>
        <false/>
        <key>ProgramArguments</key>
        <array>
                <string>export MSF_DATABASE_CONF=/opt/local/config/database.yml</string>
                <string>/opt/local/bin/ruby</string>
                <string>/opt/local/msf/msfrpcd</string>
                <string>-f</string>
                <string>-U</string>
                <string>msfuser2</string>
                <string>-P</string>
                <string>msfpassword2</string>
                <string>-S</string>
                <string>-a</string>
                <string>127.0.0.1</string>
                <string>-t</string>
                <string>Msg</string>
        </array>
        <key>WorkingDirectory</key>
        <string>/opt/local/bin/</string>
</dict>
</plist>

Start the msfrpcd launchd with sudo launchctl load /Library/LaunchDaemons/org.metasploitframework.rpcd.plist
Armitage

Version mac from here: http://www.fastandeasyhacking.com/download doesn't work for me.
The only way I Armitage worked for me, is to launch it from command line with this:
MSF_DATABASE_CONFIG=/opt/local/config/database.yml open /Applications/Armitage.app

Although I've tried to put it to ~/.zshrc and /etc/bashrc and ~/.profile, variable is visible only for me, but not visible for armitage so whatever.. it works.
If you have problem like this: java.net.SocketException: Unexpected end of file from server You probably forgot to include -S param when starting msfrpcd, this one disables SSL.
Compile Armitage from source

cd /opt
svn checkout http://armitage.googlecode.com/svn/trunk/ armitage-read-only
mv armitage-read-only armitage && cd armitage
port -v install apache-ant
./package.sh
java -C "armitage.jar"