omargnagy / subterfuge

Automatically exported from code.google.com/p/subterfuge
GNU General Public License v3.0
0 stars 0 forks source link

http injection error #144

Open GoogleCodeExporter opened 8 years ago

GoogleCodeExporter commented 8 years ago
What steps will reproduce the problem?

1. start subterfuge
2. configure http injection module
3. click apply button

What is the expected output? What do you see instead?

i have this error:
http://pastebin.com/K7PYGLC5

What version of the product are you using? On what operating system?
v 1.0-1, latest Kali Linux

Please provide any additional information below.

1º i intalled kali and updated everything
2º installed subterfuge + all dependencies
3º started the app and tried to configure http injection then had this error:

Request Method:     POST
Request URL:    http://127.0.0.1/config/httpinjection/
Django Version:     1.4.5
Exception Type:     MultiValueDictKeyError
Exception Value:    

"Key 'startmsf' not found in <QueryDict: {u'status': [u'no', u'yes'], 
u'custominject': [u''], u'injectip': [u''], u'iexploit': 
[u'inject-ext-server'], u'start-msf': [u'no'], u'injectport': [u''], 
u'payload': [u'frameinjection']}>"

Exception Location: 
    /usr/lib/python2.7/dist-packages/django/utils/datastructures.py in 
__getitem__, line 258

Python Executable:  /usr/bin/python
Python Version:     2.7.3
Python Path:    

['/usr/share/subterfuge',
 '/usr/share/subterfuge',
 '/usr/share',
 '/usr/lib/python2.7',
 '/usr/lib/python2.7/plat-linux2',
 '/usr/lib/python2.7/lib-tk',
 '/usr/lib/python2.7/lib-old',
 '/usr/lib/python2.7/lib-dynload',
 '/usr/local/lib/python2.7/dist-packages',
 '/usr/lib/python2.7/dist-packages',
 '/usr/lib/python2.7/dist-packages/PIL',
 '/usr/lib/python2.7/dist-packages/gtk-2.0',
 '/usr/lib/pymodules/python2.7',
 '/usr/lib/python2.7/dist-packages/wx-2.8-gtk2-unicode',
 '/usr/share/subterfuge/utilities']

Original issue reported on code.google.com by Vinicius...@gmail.com on 5 Jan 2014 at 4:00

GoogleCodeExporter commented 8 years ago
in backtrack it's all working, but in kali just a bunch of errors...

Original comment by Vinicius...@gmail.com on 7 Jan 2014 at 3:08

GoogleCodeExporter commented 8 years ago
same error now in ubuntu 13.10:

[07/Jan/2014 13:22:56] "POST /config/httpinjection/ HTTP/1.1" 500 75087
Internal Server Error: /config/httpinjection/
Traceback (most recent call last):
  File "/usr/lib/python2.7/dist-packages/django/core/handlers/base.py", line 114, in get_response
    response = wrapped_callback(request, *callback_args, **callback_kwargs)
  File "/usr/share/subterfuge/main/views.py", line 396, in conf
    httpcodeinjection(request, conf)
  File "/usr/share/subterfuge/modules/views.py", line 131, in httpcodeinjection
    status = request.POST["status"]
  File "/usr/lib/python2.7/dist-packages/django/utils/datastructures.py", line 301, in __getitem__
    raise MultiValueDictKeyError(repr(key))
MultiValueDictKeyError: "'status'"
[07/Jan/2014 13:23:35] "GET /config/httpinjection/ HTTP/1.1" 500 71898

Original comment by Vinicius...@gmail.com on 7 Jan 2014 at 7:25

GoogleCodeExporter commented 8 years ago
Are you using the browser_autopwn option for the code injection? It is possible 
that code hasn't been properly updated to work with the latest version of Kali 
Linux. If you still want browser_autopwn functionality for the moment, you can 
select the ext-server option and set up the browser_autopwn manually with 
Metasploit (or Armitage). The main thing that you need to do in the Metasploit 
setup is ensure that the URIPATH option is set to / . Then, the ext-server 
option in Subterfuge should work fine. You just specify the IP address and port 
that is running browser_autopwn in Subterfuge (can be the same IP as the 
machine Subterfuge is running on).

Original comment by topher.s...@gmail.com on 8 Jan 2014 at 1:23

GoogleCodeExporter commented 8 years ago
i was using the ext-server option and is still not working, i need to run 
armitage before starting the module??

the error that remain is:

Exception Location: 
    /usr/local/lib/python2.7/dist-packages/django/utils/datastructures.py in 
__getitem__, line 256

Thank's.

Original comment by Vinicius...@gmail.com on 3 Feb 2014 at 12:34

GoogleCodeExporter commented 8 years ago
Hi all,
      I too had the same issue  "when enabling the ext-server".

     the solution for this issue is simple. it is saying that "startmsf" is not found in the dictionary. 

Edit file "/usr/share/subterfuge/templates/plugins.ext" 

search for 'start-msf' and replace with 'startmsf'. you will find 4 entries. 
replace all four and start "subterfuge"

Original comment by Aduri.a...@gmail.com on 25 Feb 2014 at 4:44