보자. 이제 v4.6.2-1 로업데이트됐다. 그림 F-15의하단처럼 msfupdate를입력해 root @bt:~# msfudpate 그림 F-16 과같이정상적으로업데이트가진행되는것을볼수있다. 이후에는 msfupdate를입력하면최신업데이트모듈과공격코드를쉽게유지할수있다. 그림 F-16 msfupdate의진행확인 G. SET 업데이트문제해결 백트랙을기본설치로운영을할때에는 SET 패키지를업그레이드할경우에러가발생한다. 이런문제를해결하는방법에는저장소주소를수정해업데이트하거나신규로다운로드해설치하는두가지방식이있다. 저장소주소의수정다음과같이 se-toolkit. postinst 파일을수정한후 apt-get update, apt-get upgrade를실행하면자동으로업데이트가진행된다. root@bt:~# vi /var/lib/dpkg/info/se-toolkit.postinst 608 부록
#!/bin/bash rm -rf /pentest/exploits/set/ 2> /dev/null cd /pentest/exploits git clone https://github.com/trustedsec/social-engineer-toolkit/ set/ # 수정 신규다운로드와설치신규로 SET 파일을다운로드해설치한다. 실행은 se-toolkit으로명령어가수정된다. 다음명령을이용해새로다운로드한다. git clone https://github.com/trustedsec/social-engineer-toolkit/ set/ 다운로드한후에는다음과같이설치를진행한다. 굵은체는명령어를입력한 부분이니참고하기바란다. root@bt:~/set#./setup.py install Reading package lists... Done Building dependency tree Reading state information... Done Package git is not available, but is referred to by another package. This may mean that the package is missing, has been obsoleted, or is only available from another source E: Package git has no installation candidate [*] Installing SET into the /usr/share/setoolkit folder through git... Initialized empty Git repository in /usr/share/setoolkit/.git/ remote: Counting objects: 15019, done. remote: Compressing objects: 100% (5671/5671), done. remote: Total 15019 (delta 9447), reused 14904 (delta 9334) Receiving objects: 100% (15019/15019), 58.94 MiB 258 KiB/s, done. Resolving deltas: 100% (9447/9447), done. [*] Installing setoolkit installer to /usr/bin/setoolkit... [*] Note you will manually need to install Core Security 'Impacket' [*] Download link: http://corelabs.coresecurity.com/index.php?module=wiki&action=view&type= tool&name=impacket [*] Once downloaded, tar -zxvf impacket*, go to the directory and run python setup.py install. 모의해킹과보안전문가가꼭알아야할참고사항 609
[*] We are no finished! To run SET, type se-toolkit... root@bt:~/set# ls config modules readme README.txt set-automate se-toolkit set-proxy set-update setup.py set-web src root@bt:~/set#./se-toolkit [-] New set_config.py file generated on: 2013-07-24 01:44:39.402441 [-] Verifying configuration update... [*] Update verified, config timestamp is: 2013-07-24 01:44:39.402441 [*] SET is using the new config, no need to restart Copyright 2013, The Social-Engineer Toolkit (SET) by TrustedSec, LLC All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:...( 중략)... Do you agree to the terms of service [y/n]: y..######..########.########.##...##.##...##....##...##...##.....######..######...##......##.##...##....##...##.##...##.....######..########...##... [---] The Social-Engineer Toolkit (SET) [---] [---] Created by: David Kennedy (ReL1K) [---] [---] Version: 5.2.2 [---] [---] Codename: 'Urban Camping' [---] [---] Follow us on Twitter: @trustedsec [---] [---] Follow me on Twitter: @dave_rel1k [---] [---] Homepage: https://www.trustedsec.com [---] Welcome to the Social-Engineer Toolkit (SET). The one 610 부록
stop shop for all of your social-engineering needs. Join us on irc.freenode.net in channel #setoolkit The Social-Engineer Toolkit is a product of TrustedSec. Visit: https://www.trustedsec.com Select from the menu: 1) Social-Engineering Attacks 2) Fast-Track Penetration Testing 3) Third Party Modules 4) Update the Metasploit Framework 5) Update the Social-Engineer Toolkit 6) Update SET configuration 7) Help, Credits, and About 99) Exit the Social-Engineer Toolkit set> 5 [-] Updating the Social-Engineer Toolkit, be patient... [-] Performing cleanup first... Removing src/agreement4 Removing src/logs/ Removing ~/ [-] [*] Updating... This could take a little bit... Already up-to-date. [*] The updating has finished, returning to main menu..!\ /!\!!!! \!! Social-Engineer Toolkit!! \!! Free!!!!! #hugs!!!!! By: TrustedSec!! /!!!! / 모의해킹과보안전문가가꼭알아야할참고사항 611
!/ \!/ \ / /!_!!/ /oooo? oooo? oooo? oooo /! /ooooooooooooooooooooooo/ / /ooooooooooooooooooooooo/ / /C= /_/ [---] The Social-Engineer Toolkit (SET) [---] [---] Created by: David Kennedy (ReL1K) [---] [---] Version: 5.2.2 [---] [---] Codename: 'Urban Camping' [---] [---] Follow us on Twitter: @trustedsec [---] [---] Follow me on Twitter: @dave_rel1k [---] [---] Homepage: https://www.trustedsec.com [---] Welcome to the Social-Engineer Toolkit (SET). The one stop shop for all of your social-engineering needs. Join us on irc.freenode.net in channel #setoolkit The Social-Engineer Toolkit is a product of TrustedSec. Visit: https://www.trustedsec.com Select from the menu: 1) Social-Engineering Attacks 2) Fast-Track Penetration Testing 3) Third Party Modules 4) Update the Metasploit Framework 5) Update the Social-Engineer Toolkit 6) Update SET configuration 7) Help, Credits, and About 99) Exit the Social-Engineer Toolkit set> 612 부록