slight syntax updates to md
parent
45cb0a9f6e
commit
3024725122
|
@ -3,14 +3,17 @@ This module identifies the target host's PostgreSQL version. This occurs via the
|
|||
|
||||
## Vulnerable Application
|
||||
### Installation of PostgreSQL on Kali Linux:
|
||||
While many versions of Kali Linux come with a PostgreSQL installation out of the box, in the event that you are using a containerized Kali Linux or other minimal installation, installation and setup of PostgreSQL is required
|
||||
While many versions of Kali Linux come with a PostgreSQL installation out of the box, in the event that you are using a containerized Kali Linux
|
||||
or other minimal installation, installation and setup of PostgreSQL is required.
|
||||
|
||||
The following instructions assume you are beginning with a fresh Kali installation as the root user.
|
||||
|
||||
1. `apt-get update`
|
||||
2. `apt-get install postgresql`
|
||||
3. `systemctl start postgresql`
|
||||
|
||||
At this point, PostgreSQL is installed and the installation has created the necessary user accounts to run the server. This is where most users would begin the verification process. At this point, we'll setup a user account for use within the `postgres_version` module
|
||||
At this point, PostgreSQL is installed and the installation has created the necessary user accounts to run the server.
|
||||
This is where most users would begin the verification process. At this point, we'll setup a user account for use within the `postgres_version` module
|
||||
|
||||
4. `sudo --login --user postgres`
|
||||
5. `psql`
|
||||
|
@ -22,11 +25,11 @@ At this point, PostgreSQL is installed and the installation has created the nece
|
|||
3. `set RPORT [port]`
|
||||
4. `set USERNAME [username]`
|
||||
5. `set PASSWORD [password]`
|
||||
4. `run`
|
||||
|
||||
6. `run`
|
||||
|
||||
## Scenarios
|
||||
### PostgreSQL 10.4 on Kali Linux
|
||||
|
||||
```
|
||||
msf > use auxiliary/scanner/postgres/postgres_version
|
||||
msf auxiliary(scanner/postgres/postgres_version) > set RHOSTS 10.10.10.25
|
||||
|
@ -44,6 +47,7 @@ msf auxiliary(scanner/postgres/postgres_version) > run
|
|||
|
||||
## Confirming
|
||||
### [postgresql](https://www.postgresql.org/docs/10/static/functions-info.html)
|
||||
|
||||
```
|
||||
# sudo --login --user postgres psql
|
||||
psql (10.4 (Debian 10.4-2))
|
||||
|
|
Loading…
Reference in New Issue