db_autopwn and file_autopwn - neinwechter/metasploit-framework GitHub Wiki

The Autopwn-Modules branch I have created has all of the autopwn related features that have been stripped out of the Metasploit mainline with some fixes/changes. These features are not supported by Metasploit/Rapid7.

Specifically, a setup timing issue is resolved in file_autopwn and db_autopwn is now a plugin. Browser_autopwn will be added in here if it is ever removed from mainline Metasploit.

db_autopwn is fundamentally broken and is likely beyond repair. Metasploit will be replacing much of it’s functionality in other ways (partiularly in the UI versions), however I understand that db_autopwn is integrated into a number of tools and processes people use. It’s presence here is more of a side effect of wanting to keep browser_autopwn and file_autopwn alive for at least a while, which makes it a good place to house the code for now.

I will be making modifications to db_autopwn, file_autopwn and browser_autopwn to clean up a few things and welcome any issues/requests related to this plugin but cannot guarantee any specific level of support. Requests should be made via the issues feature within my fork (neinwechter/metasploit-framework).

The files in this branch that are not in the master currently are: file_autopwn [db_autopwn] (https://github.com/neinwechter/metasploit-framework/blob/autopwn-modules/plugins/db_autopwn.rb)

file_autopwn.rb goes into “modules/auxiliary/server” and db_autopwn.rb goes into “plugins/”.

Once you have these two files placed into the proper directories, use file_autopwn as you would any other auxiliary module (except now it will actually load most of the applicable modules) and use the command “load db_autopwn” to load the db_autopwn plugin, following which you can issue it commands as normal.