[solved]active support and active record are missing

zux0x3a · n00b Joined: 18 Aug 2018 Posts: 37

Hello ,

i think there is a missing packages in gentoo distfiles (activesupport-2.4.6 - activerecord-2.4.6) these to dev-ruby are required to install metasploit because it depends on it , the bug is clear even pentoo is facing his issue .

is they are recomplied ones for these so we can use it , or any working ebuild that help the case ,
_________________
Gentoo Secploit - Best Light Penetration Testing Distribution
https://secploit.com/tools

fedeliallalinea · Posted: Thu Dec 13, 2018 2:38 pm Post subject:

What version of net-analyzer/metasploit? Because current versions (4.14.16-r1, 4.17.21-r3) in portage depends on

zux0x3a · n00b Joined: 18 Aug 2018 Posts: 37

fedeliallalinea

even if we emerged 4.17.21-r3 or 4.17.30 they still need these one while checking extracted files from github , not from the ebuild it self , it means metasploit files downloaded from github still need these to be installed to compile it
_________________
Gentoo Secploit - Best Light Penetration Testing Distribution
https://secploit.com/tools

Hu · Moderator Joined: 06 Mar 2007 Posts: 21619

zux0x3a · n00b Joined: 18 Aug 2018 Posts: 37

Hu

it is okay if it is downloaded from github , but they should at least gentoo provide all requirements since these are missing metasploit the most important part for security purpose can't be installed on gentoo , and i think it can be fixed if we get the old mentioned dev-rubies

thanks
_________________
Gentoo Secploit - Best Light Penetration Testing Distribution
https://secploit.com/tools

Hu · Moderator Joined: 06 Mar 2007 Posts: 21619

Why is it OK if it downloads from a service that could change or remove the files at any point? How can you reliably reproduce a Metasploit install if one of the standard steps is to pull inherently non-reproducible content?

zux0x3a · n00b Joined: 18 Aug 2018 Posts: 37

Hu

gentoo can't make self contained as you mentioned since metasploit is under dev status and daily updated , so gentoo provide the ebuild to satisfy their requirement for installation , the only missing part is the Gem ebuild which is needed by metasploit to start , i think the fix is easy by gentoo by just providing these gem as ebuilds
i tried to fix some of it but there is more
https://github.com/lawrenceamer/secploitrepo/tree/master/dev-ruby

thanks
_________________
Gentoo Secploit - Best Light Penetration Testing Distribution
https://secploit.com/tools

Hu · Moderator Joined: 06 Mar 2007 Posts: 21619

That loops back to my earlier point. In my opinion, it is a design flaw in the upstream distribution of Metasploit that downstream distributors cannot create a self-contained offline installation package. I accept that such may be beyond the practical capabilities of the Gentoo maintainer, depending on how Metasploit does this. I disagree that it is reasonable that Metasploit handle updates in a way that makes it impractical for the Gentoo maintainer to make the installation self-contained.

zux0x3a · n00b Joined: 18 Aug 2018 Posts: 37

Hu

i am working on a fix for this also, and i will follow up with pentoo also hopefully to get it work again

thanks
_________________
Gentoo Secploit - Best Light Penetration Testing Distribution
https://secploit.com/tools

zux0x3a · n00b Joined: 18 Aug 2018 Posts: 37

the issue has been solved on arm64 running successfully with metasploit 4.21.r4 ,
https://github.com/lawrenceamer/secploitrepo/tree/master/exploitation/metasploit

after installation steps below is required :