December 2012 - macports-tickets - lists.macosforge.org

[MacPorts] #31901: add SQlNinja to the ports tree
by MacPorts 04 Apr '14

04 Apr '14

#31901: add SQlNinja to the ports tree --------------------------------------------------+------------------------- Reporter: fyodor.vassiley@… | Owner: macports-tickets@… Type: request | Status: new Priority: Low | Milestone: Component: ports | Version: 2.0.3 Keywords: CEHv7 SQlNinja sql injection pentest | Port: SQlNinja --------------------------------------------------+------------------------- http://sqlninja.sourceforge.net/ Introduction Fancy going from a SQL Injection on Microsoft SQL Server to a full GUI access on the DB? Take a few new SQL Injection tricks, add a couple of remote shots in the registry to disable Data Execution Prevention, mix with a little Perl that automatically generates a debug script, put all this in a shaker with a Metasploit wrapper, shake well and you have just one of the attack modules of sqlninja! Sqlninja is a tool targeted to exploit SQL Injection vulnerabilities on a web application that uses Microsoft SQL Server as its back-end. Its main goal is to provide a remote access on the vulnerable DB server, even in a very hostile environment. It should be used by penetration testers to help and automate the process of taking over a DB Server when a SQL Injection vulnerability has been discovered. Have a look at the flash demo and then feel free to download. It is released under the GPLv3 Features The full documentation can be found in the tarball and also here, but here's a list of what the Ninja does: Fingerprint of the remote SQL Server (version, user performing the queries, user privileges, xp_cmdshell availability, DB authentication mode) Bruteforce of 'sa' password (in 2 flavors: dictionary-based and incremental) Privilege escalation to sysadmin group if 'sa' password has been found Creation of a custom xp_cmdshell if the original one has been removed Upload of netcat (or any other executable) using only normal HTTP requests (no FTP/TFTP needed) TCP/UDP portscan from the target SQL Server to the attacking machine, in order to find a port that is allowed by the firewall of the target network and use it for a reverse shell Direct and reverse bindshell, both TCP and UDP ICMP-tunneled shell, when no TCP/UDP ports are available for a direct/reverse shell but the DB can ping your box DNS-tunneled pseudo-shell, when no TCP/UDP ports are available for a direct/reverse shell, but the DB server can resolve external hostnames (check the documentation for details about how this works) Evasion techniques to confuse a few IDS/IPS/WAF Integration with Metasploit3, to obtain a graphical access to the remote DB server through a VNC server injection Integration with churrasco.exe, to escalate privileges to SYSTEM on w2k3 via token kidnapping Support for CVE-2010-0232, to escalate the privileges of sqlservr.exe to SYSTEM -- Ticket URL: <https://trac.macports.org/ticket/31901> MacPorts <http://www.macports.org/> Ports system for Mac OS

1 1

[MacPorts] #31842: pftop request to add port
by MacPorts 04 Apr '14

04 Apr '14

#31842: pftop request to add port --------------------------------------+------------------------------------- Reporter: nonstop.server@… | Owner: macports-tickets@… Type: request | Status: new Priority: Normal | Milestone: Component: ports | Version: 2.0.3 Keywords: | Port: pftop --------------------------------------+------------------------------------- Request to add a port of pftop for systems running Mac OS X 10.7 Lion.[[BR]] Pftop is a small, curses-based utility for real-time display of active states and rule statistics for pf, the packet filter. * [http://www.eee.metu.edu.tr/~canacar/pftop/ Home Page][[BR]] * [http://www.eee.metu.edu.tr/~canacar/pftop-0.7.tar.gz Source Code] -- Ticket URL: <https://trac.macports.org/ticket/31842> MacPorts <http://www.macports.org/> Ports system for Mac OS

1 1

[MacPorts] #32006: Port Request: Perl DateTime::Format::DateParse
by MacPorts 04 Apr '14

04 Apr '14

#32006: Port Request: Perl DateTime::Format::DateParse --------------------------------+------------------------------------------- Reporter: misty.sj@… | Owner: macports-tickets@… Type: request | Status: new Priority: Normal | Milestone: Component: ports | Version: 2.0.3 Keywords: | Port: --------------------------------+------------------------------------------- I request a port of the Perl module DateTime::Format::DateParse. The CPAN page with the source is http://search.cpan.org/~jhoblitt/DateTime-Format- DateParse-0.05/lib/DateTime/Format/DateParse.pod. -- Ticket URL: <https://trac.macports.org/ticket/32006> MacPorts <http://www.macports.org/> Ports system for Mac OS

1 2

[MacPorts] #33020: Error: Port macchanger not found
by MacPorts 04 Apr '14

04 Apr '14

#33020: Error: Port macchanger not found -----------------------------------+---------------------------------------- Reporter: alfco_321@… | Owner: markd@… Type: submission | Status: new Priority: High | Milestone: Component: guide | Version: 2.0.3 Keywords: | Port: -----------------------------------+---------------------------------------- I have a problem downloading macchanger, it seems that doesn't exist anymore or something. Currently I'm using Xcode 3.1.4 under MacOSx 10.5.8. -- Ticket URL: <https://trac.macports.org/ticket/33020> MacPorts <http://www.macports.org/> Ports system for Mac OS

1 4

[MacPorts] #33537: p5-net-openssh
by MacPorts 04 Apr '14

04 Apr '14

#33537: p5-net-openssh -----------------------------------+---------------------------------------- Reporter: dbolgheroni@… | Owner: macports-tickets@… Type: enhancement | Status: new Priority: Normal | Milestone: Component: ports | Version: 2.0.4 Keywords: | Port: -----------------------------------+---------------------------------------- It would be nice to have this port, since it's better maintained than the alternatives available in macports. -- Ticket URL: <https://trac.macports.org/ticket/33537> MacPorts <http://www.macports.org/> Ports system for Mac OS

1 9

[MacPorts] #33400: install mysql5 to snow leopart error
by MacPorts 03 Apr '14

03 Apr '14

#33400: install mysql5 to snow leopart error --------------------------------+------------------------------------------- Reporter: elim.qiu@… | Owner: macports-tickets@… Type: defect | Status: new Priority: Normal | Milestone: Component: ports | Version: 2.0.3 Keywords: | Port: --------------------------------+------------------------------------------- miniMac:~ elim$ sudo port install mysql5 mysql5-server ---> Computing dependencies for mysql5 ---> Configuring mysql5 Error: Target org.macports.configure returned: configure failure: shell command failed (see log for details) Log for mysql5 is at: /opt/local/var/macports/logs/_opt_local_var_macports_sources_rsync.macports.org_release_tarballs_ports_databases_mysql5/mysql5/main.log Error: Status 1 encountered during processing. To report a bug, see <http://guide.macports.org/#project.tickets> -- Ticket URL: <https://trac.macports.org/ticket/33400> MacPorts <http://www.macports.org/> Ports system for Mac OS

1 5

[MacPorts] #28121: dbus @1.2.24 +no_root
by MacPorts 03 Apr '14

03 Apr '14

#28121: dbus @1.2.24 +no_root ----------------------------+----------------------------------------------- Reporter: ph227@… | Owner: macports-tickets@… Type: defect | Status: new Priority: Normal | Milestone: Component: ports | Version: 1.9.2 Keywords: | Port: ----------------------------+----------------------------------------------- I was trying to install meld port, but failed on dbus dependency. The command : {{{ port -d install dbus +no_root }}} fail with : {{{ DEBUG: Changing to port directory: /Users/nicoph/macport/var/macports/sources/rsync.macports.org/release/ports/devel/dbus DEBUG: OS darwin/10.4.2 (Mac OS X 10.6) arch i386 DEBUG: org.macports.load registered provides 'load', a pre-existing procedure. Target override will not be provided DEBUG: org.macports.unload registered provides 'unload', a pre-existing procedure. Target override will not be provided DEBUG: org.macports.distfiles registered provides 'distfiles', a pre- existing procedure. Target override will not be provided DEBUG: Using group file /Users/nicoph/macport/var/macports/sources/rsync.macports.org/release/ports/_resources/port1.0/group/muniversal-1.0.tcl DEBUG: Reading variant descriptions from /Users/nicoph/macport/var/macports/sources/rsync.macports.org/release/ports/_resources/port1.0/variant_descriptions.conf DEBUG: universal variant already exists, so not adding the default one DEBUG: Requested variant bash_completion is not provided by port dbus. DEBUG: Executing variant no_root provides no_root DEBUG: <dscl_cmd> DS Error: -14136 (eDSRecordNotFound) while executing "exec /usr/bin/dscl . -read Users/${install.user} NFSHomeDirectory" (procedure "variant-no_root" line 15) invoked from within "variant-no_root" invoked from within "catch "variant-${name}" result" Error: dbus: Error executing no_root: <dscl_cmd> DS Error: -14136 (eDSRecordNotFound) DEBUG: Error evaluating variants while executing "error "Error evaluating variants"" (procedure "mportopen" line 58) invoked from within "mportopen $porturl [array get options] [array get requested_variations]" Error: Unable to open port: Error evaluating variants To report a bug, see <http://guide.macports.org/#project.tickets> }}} My specs : * MacPort 1.9.2 (user local installation from sources) * Os X 10.6.4 * XCode 3.2.4 -- Ticket URL: <https://trac.macports.org/ticket/28121> MacPorts <http://www.macports.org/> Ports system for Mac OS

1 10

[MacPorts] #26002: doxygen fails to build documentation when using pTeX
by MacPorts 03 Apr '14

03 Apr '14

#26002: doxygen fails to build documentation when using pTeX ------------------------------+--------------------------------------------- Reporter: css@… | Owner: css@… Type: defect | Status: new Priority: Normal | Milestone: Component: ports | Version: 1.9.1 Keywords: | Port: doxygen texlive pTeX ------------------------------+--------------------------------------------- From comment:ticket:25774:7: After the changes in r69976, 'doxygen +doc' fails to build with pTeX. pTeX is a Japanese TeX distribution based on teTeX, and it contains tocloft.sty, so I tried to change the doxygen's dependency declaration like the following to allow building 'doxygen +doc' with not only TeXLive but also pTeX. {{{ from port:texlive-latex-extra to path:${prefix}/share/texmf-dist/tex/latex/tocloft/tocloft.sty:texlive- latex-extra }}} But it didn't work as expected, because the recent MacPorts' TeXLive installs its macro files into 'texmf-texlive-dist' directory, not 'texmf- dist' directory. {{{ pTeX: $ kpsewhich tocloft.sty /opt/local/share/texmf-dist/tex/latex/tocloft/tocloft.sty TeXLive: $ kpsewhich tocloft.sty /opt/local/share/texmf-texlive-dist/tex/latex/tocloft/tocloft.sty ^^^^^^^^ }}} Is there any smart way to solve this problem? Thanks in advance. p.s. Please not that this is not just a problem between TeXLive and pTeX. When port:MacTeX (or something) is released, the same problem will occur between TeXLive and MacTeX (or something). In my current opinion, TeXLive should be reverted to use texmf-dist, not to use texmf-texlive-dist. -- Ticket URL: <http://trac.macports.org/ticket/26002> MacPorts <http://www.macports.org/> Ports system for Mac OS

1 4

[MacPorts] #16583: php5-eaccelerator 0.9.5.3 fails during configure - need to pass user id for sysvipc
by MacPorts 03 Apr '14

03 Apr '14

#16583: php5-eaccelerator 0.9.5.3 fails during configure - need to pass user id for sysvipc ---------------------------------------+------------------------------------ Reporter: moody(a)isi.edu | Owner: macports-tickets(a)lists.macosforge.org Type: defect | Status: new Priority: Normal | Milestone: Port Bugs Component: ports | Version: 1.6.0 Keywords: php5-eaccelerator sysvipc | Port: php5-eaccelerator ---------------------------------------+------------------------------------ # port --version MacPorts 1.600 # php --version PHP 5.2.6 (cli) (built: Jul 17 2008 23:04:49) Copyright (c) 1997-2008 The PHP Group Zend Engine v2.2.0, Copyright (c) 1998-2008 Zend Technologies {{{ # port install php5-eaccelerator +sessions +content_caching ---> Fetching php5-eaccelerator ---> Attempting to fetch eaccelerator-0.9.5.3.tar.bz2 from http://bart.eaccelerator.net/source/0.9.5.3/ ---> Verifying checksum(s) for php5-eaccelerator ---> Extracting php5-eaccelerator ---> Configuring php5-eaccelerator Error: Target org.macports.configure returned: configure failure: shell command " cd "/opt/local/var/macports/build/_opt_local_var_macports_sources_rsync.macports.org_release_ports_www_php5-eaccelerator/work/eaccelerator-0.9.5.3" && ./configure --prefix=/opt/local --with-php-config=/opt/local/bin/php- config --with-eaccelerator-sessions --with-eaccelerator-content-caching " returned error 1 Command output: checking for memory.h... yes checking for strings.h... yes checking for inttypes.h... yes checking for stdint.h... yes checking for unistd.h... yes checking for unistd.h... (cached) yes checking limits.h usability... yes checking limits.h presence... yes checking for limits.h... yes checking sys/param.h usability... yes checking sys/param.h presence... yes checking for sys/param.h... yes checking sched.h usability... yes checking sched.h presence... yes checking for sched.h... yes checking mandatory system headers... no checking whether union semun is defined in sys/sem.h... yes checking for sysvipc shared memory support... no checking for mmap shared memory support... yes checking for mmap on /dev/zero shared memory support... no checking for anonymous mmap shared memory support... yes checking for posix mmap shared memory support... yes checking for best shared memory type... anonymous mmap checking for spinlock semaphores support... no checking for pthread semaphores support... no checking for posix semaphores support... yes checking for sysvipc semaphores support... yes checking for fcntl semaphores support... yes checking for flock semaphores support... yes checking for best semaphores type... configure: error: "You need to pass the user id eaccelerator will be running under when using sysvipc semaphores" }}} -- Ticket URL: <http://trac.macports.org/ticket/16583> MacPorts <http://www.macports.org/> Ports system for Mac OS

1 20

[MacPorts] #29441: dsniff-devel compiles but does not work on snow leopard
by MacPorts 02 Apr '14

02 Apr '14

#29441: dsniff-devel compiles but does not work on snow leopard ----------------------------------------------------+----------------------- Reporter: tribes_email@… | Owner: macports-tickets@… Type: defect | Status: new Priority: Normal | Milestone: Component: ports | Version: 1.9.2 Keywords: dsniff urlsnard libpcap libnet libnids | Port: ----------------------------------------------------+----------------------- I've played with it for a few days, tried to compile my own version (I have tried 2.3 and 2.4b1) not matter what I always reproduce the same problem. arpspoof works but apps like dsniff, urlsnarf don't see anything on the network. They don't crash but never log anything. I think this is due to some snow leopard limitation for non blocking observation of the network. I'm not sure. -- Ticket URL: <https://trac.macports.org/ticket/29441> MacPorts <http://www.macports.org/> Ports system for Mac OS

1 7