Results 1 to 21 of 21

Thread: nessus and metasploit 4.6 trouble

  1. #1

    nessus and metasploit 4.6 trouble

    Hi after loading nessus plugin and logging in I cant run the following without this error

    msf>nessus_policy_list

    Call stack:

    /opt/metasploit/apps/pro/msf3/lib/nessus/nessus-xmlrpc.rb:258:in `block in policy_list_hash'

    /usr/lib/ruby/1.9.1/rexml/element.rb:905:in `block in each'

    /usr/lib/ruby/1.9.1/rexml/xpath.rb:67:in `each'

    /usr/lib/ruby/1.9.1/rexml/xpath.rb:67:in `each'

    /usr/lib/ruby/1.9.1/rexml/element.rb:905:in `each'

    /opt/metasploit/apps/pro/msf3/lib/nessus/nessus-xmlrpc.rb:254:in `policy_list_hash'

    /opt/metasploit/apps/pro/msf3/plugins/nessus.rb:1442:in `cmd_nessus_policy_list'

    /opt/metasploit/apps/pro/msf3/lib/rex/ui/text/dispatcher_shell.rb:427:in `run_command'

    /opt/metasploit/apps/pro/msf3/lib/rex/ui/text/dispatcher_shell.rb:389:in `block in run_single'

    /opt/metasploit/apps/pro/msf3/lib/rex/ui/text/dispatcher_shell.rb:383:in `each'

    /opt/metasploit/apps/pro/msf3/lib/rex/ui/text/dispatcher_shell.rb:383:in `run_single'

    /opt/metasploit/apps/pro/msf3/lib/rex/ui/text/shell.rb:200:in `run'

    /opt/metasploit/apps/pro/msf3/msfconsole:169:in `<main>'




    Any ideas????? it used to work fine on backtrack 5r2/3 I am now using the new 4.6 on kali and i have updated the distro.

    Has nessus integration been dropped now?????

    also outlook gives errors also, it seems older rb files dont work correctly anymore am i missing something?

  2. #2
    Join Date
    2013-Mar
    Location
    milano
    Posts
    301
    Quote Originally Posted by pentest09 View Post
    Hi after loading nessus plugin and logging in I cant run the following without this error

    msf>nessus_policy_list

    Call stack:

    /opt/metasploit/apps/pro/msf3/lib/nessus/nessus-xmlrpc.rb:258:in `block in policy_list_hash'

    /usr/lib/ruby/1.9.1/rexml/element.rb:905:in `block in each'

    /usr/lib/ruby/1.9.1/rexml/xpath.rb:67:in `each'

    /usr/lib/ruby/1.9.1/rexml/xpath.rb:67:in `each'

    /usr/lib/ruby/1.9.1/rexml/element.rb:905:in `each'

    /opt/metasploit/apps/pro/msf3/lib/nessus/nessus-xmlrpc.rb:254:in `policy_list_hash'

    /opt/metasploit/apps/pro/msf3/plugins/nessus.rb:1442:in `cmd_nessus_policy_list'

    /opt/metasploit/apps/pro/msf3/lib/rex/ui/text/dispatcher_shell.rb:427:in `run_command'

    /opt/metasploit/apps/pro/msf3/lib/rex/ui/text/dispatcher_shell.rb:389:in `block in run_single'

    /opt/metasploit/apps/pro/msf3/lib/rex/ui/text/dispatcher_shell.rb:383:in `each'

    /opt/metasploit/apps/pro/msf3/lib/rex/ui/text/dispatcher_shell.rb:383:in `run_single'

    /opt/metasploit/apps/pro/msf3/lib/rex/ui/text/shell.rb:200:in `run'

    /opt/metasploit/apps/pro/msf3/msfconsole:169:in `<main>'




    Any ideas????? it used to work fine on backtrack 5r2/3 I am now using the new 4.6 on kali and i have updated the distro.

    Has nessus integration been dropped now?????

    also outlook gives errors also, it seems older rb files dont work correctly anymore am i missing something?
    hi pentest09

    ***THIS IS MY"standard-source.list"

    #

    # deb cdrom:[Debian GNU/Linux 7.0 _Kali_ - Official Snapshot i386 LIVE/INSTALL Binary 20130311-20:38]/ kali contrib main non-free

    #deb cdrom:[Debian GNU/Linux 7.0 _Kali_ - Official Snapshot i386 LIVE/INSTALL Binary 20130311-20:38]/ kali contrib main non-free

    deb http://http.kali.org/kali kali main non-free contrib
    deb-src http://http.kali.org/kali kali main non-free contrib

    ## Security updates
    deb http://security.kali.org/kali-security kali/updates main contrib non-free

    ***THIS IS MY MSF (i think-update""every-day with apt-get"")

    =[ metasploit v4.6.0-2013041701 [core:4.6 api:1.0]
    + -- --=[ 1091 exploits - 683 auxiliary - 181 post
    + -- --=[ 298 payloads - 29 encoders - 8 nops

    msf > load nessus[*] Nessus Bridge for Metasploit 1.1
    [+] Type nessus_help for a command listing[*] Successfully loaded plugin: nessus

    msf > nessus_connect root:[email protected]:8834[*] Connecting to https://127.0.0.1:8834/ as root[*] Authenticated
    msf > nessus_policy_list
    [+] Nessus Policy List
    [+]

    ID Name Comments
    -- ---- --------
    -1 Web App Tests
    -2 Internal Network Scan
    -3 Prepare for PCI-DSS audits (section 11.2.2)
    -4 External Network Scan

    msf > MY-kali vm 32 with "standard repo"" WORKED!

    bye

  3. #3
    Join Date
    2013-Mar
    Location
    milano
    Posts
    301
    ri-hi
    i'm testing now in my oracle-vm-KALI-64bit(standard-repo[view-up]) update & upgrade (apt-get)
    & worked:

    http://imageshack.us/f/109/nessusbridgemsf.png/

    bye pent09 ;-)

  4. #4
    Hi Zim,

    Thanks for your response, at least it proves to me that its still working, so its either "bleeding edge" or the version of Nessus. Im using Nessus-5.2.0-debian6_i386.deb at the moment I have to scan and import the .nbe file and it works fine , I can load_nessus, nessus_connect user[email protected]:8834 ok (ssl) after that anything else errrrrrrrors out.

    metasploit version# metasploit v4.6.0-2013041701 [core:4.6 api:1.0] which doesnt update and doesnt even have the Java Applet Reflection Type Confusion Remote Code Execution which is nearly 3 weeks old although I can just drop it in the appropriate folder from exploit-db but it shows me its not updating as previous versions did.

    Im going to try and rollback from a clean snapshot "again" and drop bleeding edge repos and see if its all good.

    nessus_status within msfconsole =
    [+] Nessus Status
    [+]

    Feed Nessus Version Nessus Web Version
    ---- -------------- ------------------
    HomeFeed 5.2.0 4.0.35 (Build H20130418A)

    Kind Regards Dee

  5. #5
    Join Date
    2013-Mar
    Location
    milano
    Posts
    301
    hi pent09 ;-)

    you're totally right for MSFramework-version today (06/05/2013)
    we have 6 exploits & 3 auxiliary less!:
    http://imageshack.us/f/441/catturapw.png/
    with a fun parody!!

  6. #6
    Quote Originally Posted by zimmaro View Post
    hi pent09 ;-)

    you're totally right for MSFramework-version today (06/05/2013)
    we have 6 exploits & 3 auxiliary less!:
    http://imageshack.us/f/441/catturapw.png/
    with a fun parody!!
    did you register the pro version by any chance because I reverted back to clean snapshot did apt-get update & upgrade and still no joy one minute it errors while logging in from within msf then it authenticates.... nessus_help runs ok but plain old nessus_scan, Nessus_policy_list etc gives the same error. just wondering if its been locked down so you cant do webapp tests etc now that the pro version is on the go properly. Is this rapids way of limiting it ? would be good to find the answer as its getting very tedious and rapids forum is well ......not very responsive

  7. #7
    My nessus is different version!!!!!!!!!

    root@kali:~# /opt/nessus/sbin/nessusd -R
    nessusd (Nessus) 5.2.0 [build N24017] for Linux
    Copyright (C) 1998 - 2013 Tenable Network Security, Inc

  8. #8
    Join Date
    2013-May
    Posts
    1
    Hej pentest09!

    I have the same problem with my nessus -> the same version and error log.
    Somebody know what i must to do?
    MSF give me back nessus_policy_list etc..

  9. I have trouble with Metasploit update..
    Latest Metasploit update was 17.04,after that I can't update Metasploit ..
    Everything is update normally only problem is Metasplot
    Sources list is ok,everything is there..
    I do not want to uninstall and install it again.
    Any solution?

  10. #10
    Join Date
    2013-Mar
    Location
    milano
    Posts
    301
    Quote Originally Posted by pentest09 View Post
    My nessus is different version!!!!!!!!!

    root@kali:~# /opt/nessus/sbin/nessusd -R
    nessusd (Nessus) 5.2.0 [build N24017] for Linux
    Copyright (C) 1998 - 2013 Tenable Network Security, Inc
    hi pent09
    for my ignorance
    my (inutil-conclusion)

    -nessus v5.0.3 & version"update" 2013041701 of kali-metasploit_register= WORKED!!! screenshot posted yesterday!
    -nessus v5.2.1 & version"update" 2013041701 of kali-metasploit_register= NOT-WORKED!!! screenshot: http://imageshack.us/f/541/newnessusvsoldmetasploi.png/
    -nessus v5.2.1 & version"update" 2013050101 of free_ubuntu_-metasploit_register = NOT-WORKED!!! screenshot: http://imageshack.us/f/59/newnessusvsupdatemsf.png/

  11. #11
    Quote Originally Posted by zimmaro View Post
    hi pent09
    for my ignorance
    my (inutil-conclusion)

    -nessus v5.0.3 & version"update" 2013041701 of kali-metasploit_register= WORKED!!! screenshot posted yesterday!
    -nessus v5.2.1 & version"update" 2013041701 of kali-metasploit_register= NOT-WORKED!!! screenshot: http://imageshack.us/f/541/newnessusvsoldmetasploi.png/
    -nessus v5.2.1 & version"update" 2013050101 of free_ubuntu_-metasploit_register = NOT-WORKED!!! screenshot: http://imageshack.us/f/59/newnessusvsupdatemsf.png/
    Yeah triied version 5.2.1 today , no joy. Is there a chance you could send me the .deb for 5.0.3 at all as I cant get hold of older version?

    I sent an email to tenable today regarding this issue.

    Kind regards Dee

  12. #12
    Join Date
    2013-Mar
    Location
    milano
    Posts
    301
    Quote Originally Posted by pentest09 View Post
    Yeah triied version 5.2.1 today , no joy. Is there a chance you could send me the .deb for 5.0.3 at all as I cant get hold of older version?

    I sent an email to tenable today regarding this issue.

    Kind regards Dee
    azz!! idelete it!!!
    but ..it's for you ...run-fast!!!!
    wget http://goo.gl/CDTb5 -O Nessus-5.0.3-debian6_i386.deb

  13. #13
    Join Date
    2013-Mar
    Location
    milano
    Posts
    301
    Quote Originally Posted by zimmaro View Post
    azz!! idelete it!!!
    but ..it's for you ...run-fast!!!!
    wget http://goo.gl/CDTb5 -O Nessus-5.0.3-debian6_i386.deb
    SORRY!!!don't work!!!! azzzzzz!!!

  14. #14
    Quote Originally Posted by zimmaro View Post
    azz!! idelete it!!!
    but ..it's for you ...run-fast!!!!
    wget http://goo.gl/CDTb5 -O Nessus-5.0.3-debian6_i386.deb
    Thanks your a star!! I got it..will keep u updated .

    Kind Regards Dee

    #Nessus-5.0.3-debian6_i386.deb' is not a debian format archive
    Last edited by pentest09; 2013-05-07 at 21:13.

  15. #15
    Join Date
    2013-Mar
    Location
    milano
    Posts
    301
    http://archive.ualinux.com/ubuntu/main/precise/

    i've reinstall this!! 5.0.1
    bye &sorry

  16. #16
    Quote Originally Posted by zimmaro View Post
    http://archive.ualinux.com/ubuntu/main/precise/

    i've reinstall this!! 5.0.1
    bye &sorry
    Already on same page installing now thanks

    Nessus 5.0.1 version solves metasploit integration issue..

    root@kali:~# dpkg -i Nessus-5.0.1-debian6_i386.deb
    (Reading database ... 263933 files and directories currently installed.)
    Unpacking nessus (from Nessus-5.0.1-debian6_i386.deb) ...
    Setting up nessus (5.0.1) ...
    nessusd (Nessus) 5.0.1 [build R23111] for Linux
    (C) 1998 - 2012 Tenable Network Security, Inc.

    Processing the Nessus plugins...
    [##################################################]

    All plugins loaded

    - You can start nessusd by typing /etc/init.d/nessusd start
    - Then go to https://kali:8834/ to configure your scanner

    root@kali:~# /etc/init.d/nessusd start
    $Starting Nessus : .
    root@kali:~# service postgresql status
    Running clusters: 9.1/main
    root@kali:~# service metasploit status
    [ ok ] Metasploit rpc server is running.
    [ ok ] Metasploit web server is running.
    root@kali:~# msfconsole

    __________________________________________________ ____________________________
    | |
    | METASPLOIT CYBER MISSILE COMMAND V4 |
    |_________________________________________________ _____________________________|
    \ / /
    \ . / / x
    \ / /
    \ / + /
    \ + / /
    * / /
    / . /
    X / / X
    / ###
    / # % #
    / ###
    . /
    . / . * .
    /
    *
    + *

    ^
    #### __ __ __ ####### __ __ __ ####
    #### / \ / \ / \ ########### / \ / \ / \ ####
    ################################################## ##############################
    ################################################## ##############################
    # WAVE 4 ######## SCORE 31337 ################################## HIGH FFFFFFFF #
    ################################################## ##############################
    http://metasploit.pro


    Frustrated with proxy pivoting? Upgrade to layer-2 VPN pivoting with
    Metasploit Pro -- type 'go_pro' to launch it now.

    =[ metasploit v4.6.0-dev [core:4.6 api:1.0]
    + -- --=[ 1068 exploits - 670 auxiliary - 179 post
    + -- --=[ 277 payloads - 29 encoders - 8 nops

    msf > load nessus[*] Nessus Bridge for Metasploit 1.1
    [+] Type nessus_help for a command listing[*] Successfully loaded plugin: nessus
    msf > nessus_connect attaxsuite:######@127.0.0.1:8834 ok[*] Connecting to https://127.0.0.1:8834/ as attaxsuite[*] Authenticated
    msf > nessus_policy_list
    [+] Nessus Policy List
    [+]

    ID Name Comments
    -- ---- --------
    -1 External Network Scan
    -2 Web App Tests
    -3 Prepare for PCI-DSS audits (section 11.2.2)
    -4 Internal Network Scan

    msf > nessus_scan_new -4 test 192.168.0.1/24[*] Creating scan from policy number -4, called "test" and scanning 192.168.0.1/24[*] Scan started. uid is c4f3ad7a-8806-5c13-c231-1808e026ec0f3320412ddcb3c15c

    Problem solved!!! thanks zimmaro for all your input.

    Kind regards Dee
    Last edited by pentest09; 2013-05-07 at 22:18.

  17. #17
    Join Date
    2013-Mar
    Location
    milano
    Posts
    301
    Quote Originally Posted by pentest09 View Post
    Already on same page installing now thanks


    again sorry for the wrong information before!


    now I scourge the ***! muahaha!

    NOW I'VE 5.0.1 ubuntu_xx_i386 now worked!
    http://imageshack.us/photo/my-images/22/n501.png/

    good night!

  18. #18
    Join Date
    2013-Jun
    Posts
    5
    Quote Originally Posted by pentest09 View Post
    Already on same page installing now thanks

    Nessus 5.0.1 version solves metasploit integration issue..
    I have the same issue. Does anyone have a link to Nessus-5.0.1-debian6_i386.deb? The http://archive.ualinux.com/ubuntu/main/precise/ link only provides the build for Ubuntu.

  19. #19
    Join Date
    2013-Aug
    Posts
    1
    Same problem here. I couldn't find Nessus-5.0.1-debian6_i386.deb. Does anyone have a link?

  20. #20
    Join Date
    2013-Aug
    Posts
    1

    upgrade nessus

    Quote Originally Posted by p0wder View Post
    Same problem here. I couldn't find Nessus-5.0.1-debian6_i386.deb. Does anyone have a link?
    Upgrade nessus bridge from darkOperator's github. Works fine for me with Nessus 5.2.1

    https://github.com/darkoperator/Ness...or-Metasploit/

  21. #21
    Join Date
    2013-Mar
    Location
    milano
    Posts
    301
    Quote Originally Posted by p0wder View Post
    Same problem here. I couldn't find Nessus-5.0.1-debian6_i386.deb. Does anyone have a link?
    INTO this thread:
    http://forums.kali.org/showthread.ph...ghlight=nessus

Similar Threads

  1. nessus integeration with metasploit is not working
    By graytips in forum TroubleShooting Archive
    Replies: 2
    Last Post: 2013-08-13, 02:46
  2. Metasploit & Set update trouble
    By wido046 in forum TroubleShooting Archive
    Replies: 4
    Last Post: 2013-05-03, 14:50

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •