{"id":73,"date":"2009-07-16T20:34:00","date_gmt":"2009-07-17T01:34:00","guid":{"rendered":"http:\/\/www.rajatswarup.com\/blog\/?p=73"},"modified":"2010-02-10T23:18:26","modified_gmt":"2010-02-11T04:18:26","slug":"metasploit-veritas-backupexec-dumping","status":"publish","type":"post","link":"https:\/\/www.rajatswarup.com\/blog\/2009\/07\/16\/metasploit-veritas-backupexec-dumping\/","title":{"rendered":"Metasploit Veritas BackupExec Dumping"},"content":{"rendered":"<p>In metasploit there&#8217;s a plugin admin\/backupexec\/dump.  This plugin uses the default credentials to login to Veritas backupexec agent and download an arbitrary file.  The catch is it downloads it in the MTF (Microsoft Tape Format) file.  You need a utility called NTBackup to restore this file.  Metasploit authors have conveniently made this available for us at <a href=\"http:\/\/metasploit.com\/tools\/msbksrc.tar.gz\">http:\/\/metasploit.com\/tools\/msbksrc.tar.gz<\/a>.<br \/>However, if you compile this file you get an error:<br \/><span style=\"font-family: courier new;\">msqic.c:814: error: conflicting types for &#8216;bques&#8217;<\/span><br \/>This happens because the function prototype is missing. <br \/>Goto line 169 of msqic.c file in the source code and add the following line:<br \/><span style=\"font-family: courier new;\">int bques(char);<\/span><br \/>Once you add this, you should be able to make the client and should be able to extract the file from the .mtf file.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In metasploit there&#8217;s a plugin admin\/backupexec\/dump. This plugin uses the default credentials to login to Veritas backupexec agent and download an arbitrary file. The catch is it downloads it in the MTF (Microsoft Tape Format) file. You need a utility called NTBackup to restore this file. Metasploit authors have conveniently made this available for us [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[197],"tags":[220,221,219],"class_list":["post-73","post","type-post","status-publish","format-standard","hentry","category-tools","tag-backupexec","tag-metasploit","tag-veritas"],"_links":{"self":[{"href":"https:\/\/www.rajatswarup.com\/blog\/wp-json\/wp\/v2\/posts\/73","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.rajatswarup.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.rajatswarup.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.rajatswarup.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.rajatswarup.com\/blog\/wp-json\/wp\/v2\/comments?post=73"}],"version-history":[{"count":1,"href":"https:\/\/www.rajatswarup.com\/blog\/wp-json\/wp\/v2\/posts\/73\/revisions"}],"predecessor-version":[{"id":94,"href":"https:\/\/www.rajatswarup.com\/blog\/wp-json\/wp\/v2\/posts\/73\/revisions\/94"}],"wp:attachment":[{"href":"https:\/\/www.rajatswarup.com\/blog\/wp-json\/wp\/v2\/media?parent=73"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.rajatswarup.com\/blog\/wp-json\/wp\/v2\/categories?post=73"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.rajatswarup.com\/blog\/wp-json\/wp\/v2\/tags?post=73"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}