qtc-de / remote-method-guesser

Java RMI Vulnerability Scanner
GNU General Public License v3.0
828 stars 106 forks source link

RMG not present after /successful/ install #63

Closed averagejoe365 closed 7 months ago

averagejoe365 commented 9 months ago

After what appeared to be a successful install using mvn package from the remote-method-guesser directory, the command rmg -h does not load the expected help menu on Kali. I checked the installation logs to see if the command has changed, but it doesn't appear to it should have.

Is Kali 2023.4 no longer supported?

qtc-de commented 9 months ago

Hi @averagejoe365,

you misunderstand what maven is actually doing here. The command mvn package does only build the project. It does not install it to your system. After mvn package finishes, you should have a target folder within your current working directory. Within this target folder, you will find the compiled jar file. This jar file can now be executed e.g.:

[user@host remote-method-guesser]$ mvn package
[user@host remote-method-guesser]$ java -jar target/rmg-5.0.0-jar-with-dependencies.jar -h

To execute it by just running rmg you can copy or link it to an location within your $PATH. So, assuming that ~/.local/bin is in your $PATH variable, you can do the following:

[user@host remote-method-guesser]$ ln -s $(realpath target/rmg-5.0.0-jar-with-dependencies.jar) ~/.local/bin/rmg
[user@host remote-method-guesser]$ chmod +x ~/.local/bin/rmg

Or you can just copy it:

[user@host remote-method-guesser]$ cp target/rmg-5.0.0-jar-with-dependencies.jar ~/.local/bin/rmg
[user@host remote-method-guesser]$ chmod +x ~/.local/bin/rmg

On some distributions, jar files are not handled correctly when calling them directly without using java -jar .... However, if I remember correctly, on Kali you can do that by default :upside_down_face:

qtc-de commented 7 months ago

Closing because of inactivity.