Results 1 to 4 of 4

Thread: Configuring Metasploit to update thru proxy

  1. #1
    Junior Member
    Join Date
    Jul 2006
    Posts
    5

    Configuring Metasploit to update thru proxy

    Hello everyone,

    I've been testing out all the options on metasploit, but I've come into a problem that I just can't figure out, so I figure I'll see if anyone on here has had a similar issue. When I try to update metasploit thru msfupdate I'm unable to because of my proxy that is setup. I was able to set it up correctly when authenication is turned off by using these parameters


    msfupdate -u -p httpIP address):8080

    When authenication is on for the proxy I get this:
    [*] Calculating local file checksums, please wait...
    [*] Proxy: HTTP/1.1 407 Proxy Authentication Required ( The ISA Server requires
    authorization to fulfill the request. Access to the Web Proxy service is denied.
    )[*] Proxy: Via: 1.1 BIUSPRO1[*] Proxy: Proxy-Authenticate: Negotiate[*] Proxy: Proxy-Authenticate: Kerberos[*] Proxy: Proxy-Authenticate: NTLM[*] Proxy: Connection: close[*] Proxy: Proxy-Connection: close[*] Proxy: Pragma: no-cache[*] Proxy: Cache-Control: no-cache[*] Proxy: Content-Type: text/html[*] Proxy: Content-Length: 720[*] Connection failed

    Does anyone know the correct format to authenicate, I've tried the way that you would authenicate to HTTP but that did not work either. Any ideas would be very much appreciated. Thanks

  2. #2
    AO's MMA Fanatic! Computernerd22's Avatar
    Join Date
    Mar 2003
    Location
    Miami, FL
    Posts
    795
    When I try to update metasploit thru msfupdate I'm unable to because of my proxy that is setup. I was able to set it up correctly when authenication is turned off
    Why not disable the proxy server then open msfupdate? Once you have your updates then re enable the proxy server.

    It seems authentication is an issue. Can you access secure URLs through that proxy server? I know a lot of times accessing secure URLs through a non secure proxy server such as 'http' will not go through and will display a forbidden error message.

    ADDED* Forgot I had these bookmarked. These will help you



    These should help you.

    http://searchsqlserver.techtarget.co...159718,00.html

    http://www.datastronghold.com/content/view/150/29/


    http://www.securityfocus.com/infocus/1790

  3. #3
    Junior Member
    Join Date
    Jul 2006
    Posts
    5
    Thanks I will check out the sites.

  4. #4
    AO's MMA Fanatic! Computernerd22's Avatar
    Join Date
    Mar 2003
    Location
    Miami, FL
    Posts
    795
    msfupdate -u -p httpIP address):8080

    When authenication is on for the proxy I get this:
    [*] Calculating local file checksums, please wait...
    [*] Proxy: HTTP/1.1 407 Proxy Authentication Required ( The ISA Server requires
    authorization to fulfill the request. Access to the Web Proxy service is denied.
    'Access to the Web Proxy service is denied.' <-- Is the promblem.

    You can use update metasploit through TOR really easy to do actually. Heres a pic

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •