Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

[*TUT*] Metasploit, S.E.T., and compatible Terminal on iPhone 4[*TUT*]

I'm sharing this with HF because I noticed on my iPhone 4, I couldn't get these working correctly, but here is how to do it if any of you struggle with it.
You'll need:
  • Jailbroken iPhone 4 (might work on other generations, not sure though)

  • Install 'OpenSSH', 'nano', and 'APT 0.7 Strict' via cydia



Make sure you have installed 'OpenSSH', 'nano', and 'APT 0.7 Strict' via cydia before you begin.

It's much faster to do this via SSH, so I'd download PuTTy: DOWNLOAD HERE. For the Terminal part of this tutorial, I suggest using WinSCP or FileZilla, you chose.

Metasploit

SSH into your iPhone, (user = root, password = alpine, unless changed with "passwd root" command) and use these commands:
Code
cd /private/var/
apt-get install subversion nano ruby rubygems wget python
apt-get clean
wget http://www.metasploit.com/releases/framework-3.4.1.tar.bz2
tar jxpf framework-3.4.1.tar.bz2
cd msf3
svn update

Social Engineering Toolkit; S.E.T.

Code
cd /private/var/
svn co http://svn.secmaniac.com/social_engineering_toolkit SET/
cd SET/
./set

Agree to install the pexpect and soup python modules

Edit your set config file found at config/set_config and change the msf path to /private/var/msf3

Code
cd config
nano set_config

to save your changes, press Ctrl+o, then Ctrl+x, confirm all

[img]http://i55.[censored].com/25quhad.png[/img]

IMPORTANT!!
A few days after I did this tutorial, the Cydia repos got an updated ruby 1.9 package, which breaks metasploit completely. To resolve this, uninstall ruby 1.9, and rubygems, and install the older packages (ruby_1.8.6-p111-5_iphoneos-arm.deb and rubygems_1.2.0-3_iphoneos-arm.deb) manually with dpkg. Here are the commands, once again I suggest doing this with putty through SSH:
Code
cd /private/var

apt-get remove ruby rubygems

wget http://apt.saurik.com/dists/tangelo-0.9/main/binary-iphoneos-arm/debs/ruby_1.8.6-p111-5_iphoneos-arm.deb

dpkg -i ruby_1.8.6-p111-5_iphoneos-arm.deb

wget http://apt.saurik.com/dists/tangelo-0.9/main/binary-iphoneos-arm/debs/rubygems_1.2.0-3_iphoneos-arm.deb

dpkg -i rubygems_1.2.0-3_iphoneos-arm.deb

rm ruby*

iPhone 4 Terminal

This terminal is somewhat laggish, but, it does work, and if you're an iPhone 4 user like me, you'll know that the terminal in Cydia doesn't work for you.

Download Mobile Terminal 4.26. SSH into your phone (this is why I suggest WinSCP, easier to drag and drop for people) and drop the .deb into:
Code
/private/

If you're using WinSCP, hit Ctrl+T, or click the Black Terminal icon, and run the command "dpkg -i MobileTerminal-426.deb"

After it gets to "setting up mobileterminal (426), close out the window, respring your phone and the icon should show up.

If it appears as a blank icon, drop This Terminal Icon into /private/var/stash/applications/terminal.app and rename it icon.png
You may need to reboot your phone once or twice for the icon to show up.

TEST!

Now, open up your terminal, and run these commands:
Code
cd /private/var/
ls

You should see two directories, 'SET', and 'msf3'.

You can now CD into SET via your mobile terminal and run

Code
su (enter root password, default is alpine)
./set

To open the SET.

Alternatively, from /private/var/, you could cd to msf3, and run
Code
./msfconsole

to open Metasploit (if you fixed the Ruby errors I posted above)

If you have any questions, feel free to PM me, I hope this works for you like it did me.
Wow thank you very much !
(Oct 16, 2010 11:33 AM)Cylay Wrote:  Wow thank you very much !

Very welcome, This is a compilation of sources online, I just put them all together for HF.
Nice tut bro. Gonna look into this, sounds like fun.
(Oct 16, 2010 11:38 AM)FadeCity Wrote:  Nice tut bro. Gonna look into this, sounds like fun.

It is =]

I'm trying to find a better terminal for the iPhone atm, the one here won't scroll up to let you see things past the screen, which if anyone has used metasploit, you know "show exploits" is gonna need that feature.
(Oct 16, 2010 12:02 PM)Fr0st_Byte Wrote:  It is =]

I'm trying to find a better terminal for the iPhone atm, the one here won't scroll up to let you see things past the screen, which if anyone has used metasploit, you know "show exploits" is gonna need that feature.

MobileTerminal 4.26 is the only Terminal that supports iOS 4.
(Oct 16, 2010 12:53 PM)SkylarTheFox Wrote:  MobileTerminal 4.26 is the only Terminal that supports iOS 4.

For now lol. Thanks though I won't bother for a while then.
thank you man..everything is okay
I hope it worked out well for you. Only thing I don't like about this is that after installing the older ruby and rubygems packages Cydia keeps wanting you to update =/
I've followed the tutorial closely, and tried looking up the solution to this error but have not had any luck. I was wondering if you would have any insight?

Im running cydia on the most recent Iphone 4 OS.

home:/private/var root# cd msf3
home:/private/var/msf3 root# ./msfconsole
/private/var/msf3/data/msfweb/vendor/rails/activesupport/lib/active_support/dependencies.rb:440:in `load_missing_constant': uninitialized constant Rex::Zip::Jar (NameError)
from /private/var/msf3/data/msfweb/vendor/rails/activesupport/lib/active_support/dependencies.rb:80:in `const_missing'
from /private/var/msf3/lib/msf/core/payload/java.rb:24:in `tcp_stager_jar'
from (eval):49:in `generate_jar'
from (eval):42:in `generate'
from /private/var/msf3/lib/msf/core/payload.rb:163:in `size'
from /private/var/msf3/lib/msf/core/payload_set.rb:168:in `recalculate'
from /private/var/msf3/lib/msf/core/payload_set.rb:113:in `each_pair'
from /private/var/msf3/lib/msf/core/payload_set.rb:113:in `recalculate'
... 7 levels...
from /private/var/msf3/lib/msf/base/simple/framework.rb:70:in `create'
from /private/var/msf3/lib/msf/ui/console/driver.rb:85:in `initialize'
from ./msfconsole:112:in `new'
from ./msfconsole:112
home:/private/var/msf3 root#
(Oct 21, 2010 11:38 PM)dubshah Wrote:  I've followed the tutorial closely, and tried looking up the solution to this error but have not had any luck. I was wondering if you would have any insight?

Im running cydia on the most recent Iphone 4 OS.

home:/private/var root# cd msf3
home:/private/var/msf3 root# ./msfconsole
/private/var/msf3/data/msfweb/vendor/rails/activesupport/lib/active_support/dependencies.rb:440:in `load_missing_constant': uninitialized constant Rex::Zip::Jar (NameError)
from /private/var/msf3/data/msfweb/vendor/rails/activesupport/lib/active_support/dependencies.rb:80:in `const_missing'
from /private/var/msf3/lib/msf/core/payload/java.rb:24:in `tcp_stager_jar'
from (eval):49:in `generate_jar'
from (eval):42:in `generate'
from /private/var/msf3/lib/msf/core/payload.rb:163:in `size'
from /private/var/msf3/lib/msf/core/payload_set.rb:168:in `recalculate'
from /private/var/msf3/lib/msf/core/payload_set.rb:113:in `each_pair'
from /private/var/msf3/lib/msf/core/payload_set.rb:113:in `recalculate'
... 7 levels...
from /private/var/msf3/lib/msf/base/simple/framework.rb:70:in `create'
from /private/var/msf3/lib/msf/ui/console/driver.rb:85:in `initialize'
from ./msfconsole:112:in `new'
from ./msfconsole:112
home:/private/var/msf3 root#

Try running it as root:
Code
su (enter password)
cd /private/var/msf3/
./msfconsole
This works well for me. Thanks for bringing everything together.
I wanted to mention that for those who are having problems with MobileTerminal on IOS4, PodZombie has a repository with a working version.
The information can be found here: http://www.podzombie.com/2010/08/learn-h...e-version/
I actually prefer iSSH with a localhost connection. I like having the easy access to the control and alt keys and the key pie rocks!

Tyg
(Nov 2, 2010 07:34 PM)TyggerBob Wrote:  This works well for me. Thanks for bringing everything together.
I wanted to mention that for those who are having problems with MobileTerminal on IOS4, PodZombie has a repository with a working version.
The information can be found here: http://www.podzombie.com/2010/08/learn-h...e-version/
I actually prefer iSSH with a localhost connection. I like having the easy access to the control and alt keys and the key pie rocks!

Tyg

You're welcome, and thanks for the extra info for others.
I've been trying to get SET on my iPhone!
Thanks man!
(Nov 7, 2010 08:28 PM)Stocking Wrote:  I've been trying to get SET on my iPhone!
Thanks man!

No problem dude, glad you enjoyed it.


Possibly Related Threads...
Thread / Author Replies Views Last Post
by VipVinceMay 15, 2026 06:38 PM 103 6,574 May 15, 2026 06:38 PM
Last Post: theprox0517
by XYLAJun 28, 2019 03:15 PM 51 4,701 Jun 28, 2019 03:15 PM
Last Post: PANDASEC2015
by spirited_wolf™Jun 23, 2017 08:03 PM 47 3,176 Jun 23, 2017 08:03 PM
Last Post: bikashmaji