[framework] problem of Metasploit 3.0 Automated Exploitation

[René Ramirez]

Sorry to be replying on such an old message, but I had been out of commission for a while (Damn Bureaucracy!).  Anyway,  this issue is only present with Windows Machines (and probably more specifically WindowsXPSP2).

The problem lies in that M$ has "beefed" up their security on downloaded files from the net.  Those files being downloaded to the ...\Temp folder are automatically blocked from automatic execution by a program (supposed to help against internet based attacks...yeah right!).  There are a couple of directories that are specific to this issue.  You can test this theory out by downloading a file say to your desktop, right click it and go to properties.  You will see a "new" button that says unblock.  This is annoying, but can be avoided by doing as you have already done and choosing an alternate "temp" directory.

Hope this sheds some light on the subject.

-EJ

-----Original Message-----
From: zouq [mailto:zouq at itsec.gov.cn] 
Sent: Tuesday, December 12, 2006 1:09 AM
To: framework at metasploit.com
Subject: Re: [framework] problem of Metasploit 3.0 Automated Exploitation

That' OK!
Thanks a lot!


----- Original Message ----- 
From: "Jerome Athias" <jerome.athias at free.fr>
To: <framework at metasploit.com>
Sent: Tuesday, December 12, 2006 4:26 PM
Subject: Re: [framework] problem of Metasploit 3.0 Automated Exploitation


> Hi,
> 
> i got the same problem a long time ago
> 
> i created an empty file "c:/temp/nmap_msf"
> i modified db.rb line 356 like that because i could not wait to test it!
> 
> #    fd = Tempfile.new('dbnmap')
>           fd = File.open('c:/temp/nmap_msf', 'r+')
> 
> i didn't test/check it again since msfupdates...
> 
> zouq a écrit :
>> Hello,everyone!
>> I run msf 3.0 under XP.When I test 3.0 Automated Exploitation Func，I have a problem as pic in attachment.
>> That is: 
>> msf>db_nmap -p 25,110
>> Failed to open XML output file /cygdrive/c/Docume~1/Admini~1/Locals~1/Temp/dbnmap.540.1 for writing
>>
>> That' why?
>> Thanks
>>