View Issue Details

Jump to NotesJump to History
IDProjectCategoryView StatusDate SubmittedLast Update
0001858Kali LinuxKali Package Bugpublic2014-11-04 05:142015-08-31 12:45
Reporterjoeviocoe Assigned Torhertzog  
PrioritynormalSeverityminorReproducibilityalways
Status closedResolutionfixed 
Product Version1.0.9 
Summary0001858: Metasploit msfupdate missing [Content_Types].xml
Description

3 metasploit exploits require the file: [Content_Types].xml

https://github.com/rapid7/metasploit-framework/tree/master/data/exploits/docx
https://github.com/rapid7/metasploit-framework/tree/master/data/exploits/CVE-2012-0013
https://github.com/rapid7/metasploit-framework/tree/master/data/exploits/CVE-2014-4114/template

Kali Linux 1.0.9 (since 1.0.6) does not properly download [Content_Types].xml during msfupdate. The rest of the files are present.

/usr/share/metasploit-framework/data/exploits/docx
/usr/share/metasploit-framework/data/exploits/CVE-2012-0013
/usr/share/metasploit-framework/data/exploits/CVE-2014-4114/template

Steps To Reproduce

msfupdate
cd /usr/share/metasploit-framework/data/exploits/CVE-2014-4114/template
ls
... notice [Content_Types].xml is missing.

Additional Information

I suspect the brackets are causing a problem during the download from github.

Without this file, these exploits fail.
The workaround is to manually download the [Content_Types].xml file into the appropriate exploit directory.

Activities

joeviocoe

joeviocoe

2014-11-04 05:19

reporter   ~0002686

https://community.rapid7.com/message/15189#15189
sinn3r

sinn3r

2014-11-04 09:15

reporter   ~0002687

Last edited: 2014-11-04 09:17

I just downloaded an installer from rapid7, and installed it on an Ubuntu 14 box. Same problem: No [Content_Types].xml. It looks like this problem may not be on Kali, but I'm not sure why. I'll let the Metasploit team know.

Note: If you git clone msf from github, you will have all the files.
joeviocoe

joeviocoe

2014-11-04 09:20

reporter   ~0002688

Last edited: 2014-11-04 09:20

Backbox 4.00 seems to be working fine with its install of Metasploit. Which is double wierd since it too, is based on Ubuntu.
joeviocoe

joeviocoe

2014-11-04 09:21

reporter   ~0002689

So what is the difference between doing a Git Clone manually, and how Kali handles msfupdate of the database?
sinn3r

sinn3r

2014-11-05 00:00

reporter   ~0002690

I reported the issue to Metasploit's Quality Engineering team. If I hear anything from them about the issue, I'll say something here.
rhertzog

rhertzog

2015-08-31 12:45

administrator   ~0003861

The [Content_Types].xml files are available in the metasploit-framework package now.

Issue History

Date Modified Username Field Change
2014-11-04 05:14 joeviocoe New Issue
2014-11-04 05:19 joeviocoe Note Added: 0002686
2014-11-04 09:15 sinn3r Note Added: 0002687
2014-11-04 09:17 sinn3r Note Edited: 0002687
2014-11-04 09:20 joeviocoe Note Added: 0002688
2014-11-04 09:20 joeviocoe Note Edited: 0002688
2014-11-04 09:21 joeviocoe Note Added: 0002689
2014-11-05 00:00 sinn3r Note Added: 0002690
2014-11-21 20:03 haider Issue cloned: 0001892
2015-08-31 12:45 rhertzog Note Added: 0003861
2015-08-31 12:45 rhertzog Status new => closed
2015-08-31 12:45 rhertzog Assigned To => rhertzog
2015-08-31 12:45 rhertzog Resolution open => fixed