Mac下安装Metasploit记录

1、安装PostgreSQL
通过homebrew来安装，命令很简单
brew install postgresql 

To migrate existing data from a previous major version of PostgreSQL run:
  brew postgresql-upgrade-database

To have launchd start postgresql now and restart at login:
  brew services start postgresql
Or, if you don't want/need a background service you can just run:
  pg_ctl -D /usr/local/var/postgres start

安装完成后，在终端运行如下命令

/usr/local/opt/postgres/bin/createuser -s postgres

就可以使用`psql -U postgres` 登陆了
（如果不允许这条命令的话psql: FATAL:  role "postgres" does not exist，重启后就等不上去了）

psql (11.3)
Type "help" for help.

postgres=# 

2、启动 重启 停止PostgreSQL 服务，【如果上面出现postgres=#，可跳过2、3这段，直接到4】
启动：
brew services start postgresql
重启：
brew services restart postgresql
停止：
brew services stop postgresql

 

3、登录PostgreSQL 数据库
开启PostgreSQL 服务后，在终端输入：
psql -U postgre -h ip地址 "password=密码"
可以使用如下命令，为postgre 用户更改密码
alter user postgres with password 'XXXXXX';
 

4、用户操作
对应命令如下(在postgres=# 环境下)：
1.查看数据库用户列表:  \du
2.创建数据库用户: create user msf with password 'msf';
3.删除数据库用户: drop user msf;

 

5、数据库操作【可忽略】
对应命令如下(在postgres=# 环境下)：
1.查看数据库列表:  \l (list的意思)
2.创建数据库: create database db1;
3.删除数据库: drop database db1;

6、数据表操作【可忽略】
1.选择数据库:  \c DatabaseName (choose的意思)
2.创建数据库表: create table people;
3.删除数据库表: drop table people;
4.查看数据库信息：\d (database list的意思)
具体参见PostgreSQL 中文手册

msf初始化数据库：msfdb init
如果出错使用：msfdb reinit

root-Air:~ root$ msfdb reinit
[?] Would you like to delete your existing data and configurations?: 
Please answer yes or no.
[?] Would you like to delete your existing data and configurations?: yes
Stopping database at /Users/root/.msf4/db
Deleting all data at /Users/root/.msf4/db
Creating database at /Users/root/.msf4/db
Starting database at /Users/root/.msf4/db...success
Creating database users
Writing client authentication configuration file /Users/root/.msf4/db/pg_hba.conf
Stopping database at /Users/root/.msf4/db
Starting database at /Users/root/.msf4/db...success
Creating initial database schema
Stopping MSF web service PID 64966
[?] Initial MSF web service account username? [root]: msf
[?] Initial MSF web service account password? (Leave blank for random password): 
Generating SSL key and certificate for MSF web service
Attempting to start MSF web service...success
MSF web service started and online
Creating MSF web service user msf

    ############################################################
    ##              MSF Web Service Credentials               ##
    ##                                                        ##
    ##        Please store these credentials securely.        ##
    ##    You will need them to connect to the webservice.    ##
    ############################################################

MSF web service username: msf
MSF web service password: msf
MSF web service user API token: c8e...0a32dbc6cbc810...6


MSF web service configuration complete
The web service has been configured as your default data service in msfconsole with the name "local-https-data-service"

If needed, manually reconnect to the data service in msfconsole using the command:
db_connect --token c8e...0a32dbc6cbc810...6 --cert /Users/root/.msf4/msf-ws-cert.pem --skip-verify https://localhost:5443

The username and password are credentials for the API account:
https://localhost:5443/api/v1/auth/account

 

出现下面提示可以使用msfupdate升级msf：
This copy of metasploit-framework is more than two weeks old.
 Consider running 'msfupdate' to update to the latest version.

如果升级中断可能出现下面错误：

root$ msfupdate
Switching to root user to update the package
Downloading package...
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
Checking signature...
Could not open package: metasploitframework-latest.pkg
Cleaning up...
metasploitframework-latest.pkg

root-Air:framework root$ ./msfupdate 
[*]
[*] Attempting to update the Metasploit Framework...
[*]

[-] ERROR: User running msfupdate does not own the Metasploit installation
[-] Please run msfupdate as the same user who installed Metasploit.
直接手动下载安装

http://osx.metasploit.com/metasploitframework-latest.pkg 

 

添加到系统变量：
https://blog.csdn.net/handsomefuhs/article/details/79687381
export MONO_HOME=/Library/Frameworks/Mono.framework/Versions/5.0.1
export PATH=$PATH:$MONO_HOME/bin
export PATH=$PATH:/opt/metasploit-framework/bin

 

---

---

---

其他记录：

默认metasploit监听5433端口，找到postgresql.conf，修改如下
# Add settings for extensions here
port = 5432

修改postgresql用户密码
https://blog.csdn.net/xocoder/article/details/24479751
sudo su postgres
psql postgres
alter user postgres with password 'new password'

2.进入postgresql中，设置默认用户密码、创建新用户、设置新用户权限、创建数据库：
sudo -u postgres psql#进入postgresql默认的用户
alter user postgres with password '密码'; #设置默认用户的登录密码
create user '用户名' wiht password '密码' nocreatedb; #创建带密码的新用户
create database '数据库名' with owner = '用户名'; #创建数据库并指定数据库的所属用户
\q

3.进入metasploit，连接数据库：
msfconsole
db_status#查看数据库的状态
db_connect 用户名:密码@主机地址\数据库名
db_status#检查是否开启成功

--------------------------------------------------------------------------
--------------------------------------------------------------------------
--------------------------------------------------------------------------

安装参考：https://blog.csdn.net/u012566895/article/details/50523476

 

下载pkg文件安装参考：https://blog.csdn.net/myfather103/article/details/79212460

 

 

数据库其他参考：
https://blog.csdn.net/myfather103/article/details/69883089
https://blog.csdn.net/xysoul/article/details/47123029
https://blog.csdn.net/ericzhangyuncsdn/article/details/79455882