Broken tools on Kali Rolling

[Fuzzer]

Hello,

I did a fresh install of Kali Linux 64 bit Light v2016.1, followed by an install of the metapackage kali-linux-all.

Linux kali 4.3.0-kali1-amd64 #1 SMP Debian 4.3.3-7kali1 (2016-01-21) x86_64 GNU/Linux

What I noticed is that some tools are not working properly e.g. ncrack and medusa.
Maybe others as well, but I didn't check them all.

1. If I start ncrack (0.4-alpha-1kali1) I see the following error:

ncrack: error while loading shared libraries: libssl.so.1.0.0: cannot open shared object file: No such file or directory

The error describes the problem very well because libssl.so.1.0.0 doesn't exit, the installed library is libssl.so.1.0.2

2. If I start medusa (2.2-0kali1) with the "-M ssh" option I get the following error:

IMPORTANT: Couldn't load "ssh" [/usr/lib/medusa/modules/ssh.mod: cannot open shared object file: No such file or directory]. Place the module in the medusa directory, set the MEDUSA_MODULE_NAME environment variable or run the configure script again using --with-default-mod-path=[path].
invokeModule failed - see previous errors for an explanation

The ssh.mod file is not in the modules directory and can't be found elsewhere on the machine.

The apt source looks like this:

root@kali:~# cat /etc/apt/sources.list
# 

# deb cdrom:[Debian GNU/Linux 2016.1 _Kali-rolling_ - Official Snapshot amd64 LIVE/INSTALL Binary 20160120-18:40]/ kali-rolling contrib main non-free

#deb cdrom:[Debian GNU/Linux 2016.1 _Kali-rolling_ - Official Snapshot amd64 LIVE/INSTALL Binary 20160120-18:40]/ kali-rolling contrib main non-free

deb http://http.kali.org/kali kali-rolling main non-free contrib
# deb-src http://http.kali.org/kali kali-rolling main non-free contrib

It is the default one.
When I check/install updates I see the following address:

root@kali:~# apt-get update
Hit:1 http://ftp.hands.com/kali kali-rolling InRelease
Reading package lists... Done

I encountered the problem several times, so I believe it can be easily reproduced, if you have the time to install the metapackage.
Please let me know if you need more information.

Kind regards,
Fuzzer

[Fuzzer]

I had some time and did further tests.

1. Kali Linux 64 bit Light v2016.1 > Live (amd64):

a. ncrack is already installed and shows the same libssl error
b. installed medusa and the file ssh.mod is missing

2. Kali Linux 64 bit v2016.1 > Live (amd64):

a. ncrack is already installed and shows the same libssl error
b. medusa is already installed and the file ssh.mod is missing

The packages are identical on Light and Full.

Package: ncrack
Version: 0.4-alpha-1kali1
Architecture: amd64
Maintainer: Devon Kearns <[email protected]>
Installed-Size: 1368
Depends: python, python-support
Homepage: http://nmap.org/ncrack/
Priority: extra
Section: utils
Filename: pool/main/n/ncrack/ncrack_0.4-alpha-1kali1_amd64.deb
Size: 670036
SHA256: 28301555a3d9e6ec23f24e0f7f07ad7635f91068391c139ee6c7a0c618a4ded3
SHA1: 8f96f835d260a872a7645b9c1481d585376ecece
MD5sum: 7e4ea1225411b180893779431169fb41

Package: medusa
Version: 2.2-0kali1
Architecture: amd64
Maintainer: Luciano Bello <[email protected]>
Installed-Size: 705
Depends: libc6 (>= 2.15), libgcrypt20 (>= 1.6.0), libpq5, libssh2-1 (>= 1.0), libssl1.0.2 (>= 1.0.2d), libsvn1 (>= 1.8)
Priority: optional
Section: admin
Filename: pool/main/m/medusa/medusa_2.2-0kali1_amd64.deb
Size: 147304
SHA256: 517b5211cedab7ebefc4dc47ed9958ca1c0493b8ab58e649c296a89fa3e5e7ae
SHA1: 12a75546b2a1907f8631d66685712b89d43160f7
MD5sum: 98cda4a38e24c1bd66a2dc32d166aa3a

What is the procedure?
Do I have to contact the package maintainers via email or do I have to open a bug for each package?

[Fuzzer]

These tests were done on Kali Linux 64 bit Light v2016.1 with the kali-linux-all metapackage.

- ldd was used to check the dependencies.
- database was updated before running locate

/usr/bin/java:
    libjli.so => not found

root@kali:~# locate libjli.so
/usr/lib/jvm/java-7-openjdk-amd64/jre/lib/amd64/jli/libjli.so
/usr/lib/jvm/java-7-openjdk-amd64/lib/amd64/jli/libjli.so

/usr/bin/multiforcer:
    libcudart.so.4 => not found

root@kali:~# locate libcudart.so.4
/usr/lib64/libcudart.so.4

1. Add the library paths to /etc/ld.so.conf.d/*.conf ?

/usr/bin/ncrack:
    libssl.so.1.0.0 => not found
    libcrypto.so.1.0.0 => not found

root@kali:~# locate libssl.so
/usr/lib/x86_64-linux-gnu/libssl.so.1.0.2
root@kali:~# locate libcrypto.so
/usr/lib/x86_64-linux-gnu/libcrypto.so.1.0.2

2. Recompile the package with openssl1.0.2?

/usr/sbin/vbox-greeter:
    libfltk.so.1.3 => not found
    libfltk_images.so.1.3 => not found

root@kali:~# locate libfltk.so
root@kali:~# locate libfltk_images.so

vbox-greeter is installed by the Guest Additions CD image.

3. In Kali Rolling, should we install the virtualbox additions using apt-get ?

[Fuzzer]

The ncrack package has been updated. Thank you.

The metasploit-framework package has been updated and it doesn't show the ruby errors anymore when you start it the first time. I didn't write a post about that since it worked fine afterwards.

Waiting for a medusa update..

[azryel]

as of this writing (19 feb 2016) i still get the following error message and i cannot use ncrack:

ncrack: error while loading shared libraries: libssl.so.1.0.0: cannot open shared object file: No such file or directory

i have updated the rolling distribution (apt-get dist-upgrade); i have reinstalled nrack (apt-get install --reinstall ncrack) and i still get the above error.

does anyone have a handful of suggestions?

[Fuzzer]

The medusa package has been updated today.

@azryel not sure if you solved the problem by now, if not let's start with the following commands:

# apt-cache show ncrack
# ldd /usr/bin/ncrack
# updatedb; locate libssl.so