search

rapid7 / metasploitable3

Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.
Other
4.78k stars 1.15k forks source link

Anyone have a local copy of ManageEngine_DesktopCentral.exe #552

Closed carldavis closed 2 years ago

carldavis commented 3 years ago

This file is no longer available and my build no not able to proceed without it.

I get a 404 when hitting this link: https://archives.manageengine.com/desktop-central/91084/ManageEngine_DesktopCentral.exe

qemu: C:\Users\vagrant>powershell -Command "[System.Net.ServicePointManager]::ServerCertificateValidationCallback = {$true} ; [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; (New-Object System.Net.WebCl ient).DownloadFile('https://archives.manageengine.com/desktop-central/91084/ManageEngine_DesktopCentral.exe', 'C:\Windows\Temp\ManageEngine_DesktopCentral.exe')" 0<NUL ==> qemu: Exception calling "DownloadFile" with "2" argument(s): "The remote server ==> qemu: returned an error: (404) Not Found."

coffeejoshua commented 3 years ago

@carldavis greetings. Did you ever find the file? I got it to build by skipping this component but it would be nice to have it or if there is a stable other link to fix the url in the script.

carldavis commented 3 years ago

Hi @coffeejoshua, unfortunately I never found that file. Did you have any issues with the build that skipped that component or did it seem to work fine?

coffeejoshua commented 3 years ago

@carldavis it otherwise worked, but is now missing the vuln: https://github.com/rapid7/metasploitable3/wiki/Vulnerabilities#manageengine for CVE-2015-8249. To me, that is acceptable for now.

I'm not an expert in this so instead of changing the formula I just overwrote: echo "skipping management engine"

to the script scripts/installs/install_manageengine.bat in order to skip it.

I also ran into it not trusting a certificate signed by letsencrypt. To override that I changed the line (added --no-check-certificate) in chef/cookbooks/metasploitable/recipes/phpmyadmin.rb file:

wget --no-check-certificate -c -t 3 -O /tmp/phpMyAdmin-3.5.8-all-languages.tar.gz https://files.phpmyadmin.net/phpMyAdmin/3.5.8/phpMyAdmin-3.5.8-all-languages.tar.gz

Also note I'm using the latest version of packer so I had to "fix" the file:

packer fix ./packer/templates/ubuntu_1404.json > ./packer/templates/fixed_ubuntu_1404.json

After verifying the fixed files renamed the original to ./packer/templates/ubuntu_1404.json.original and then renamed the fixed version to ./packer/templates/ubuntu_1404.json.

If you prefer I could fork it and give a download link with the changed files so it will build, just let me know. I was hesitant to make a pull request for changes because it looks like this project isn't getting maintained actively.

ANeilan commented 3 years ago

i have a copy of the file, i'm just not sure where to host it (also it's rather large, like 150 megs)

gnehcnij commented 2 years ago

@ANeilan You can upload to GitHub.

ANeilan commented 2 years ago

looks like there's a fork that has an alternate download location

gnehcnij commented 2 years ago

@ANeilan really nice, thanks.