infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Land #10293, fixup php/base64 and add docs for cmd/unix/reverse_bash

GSoC/Meterpreter_Web_Console
Brent Cook 2018-07-13 17:15:22 -05:00
parent b081ceff3b 88bbc50104
commit 72e5b94eb8
No known key found for this signature in database
GPG Key ID: 1FFAA0B24B708F96
2 changed files with 8 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
modules/encoders/php/base64.rb
View File

@ -22,7 +22,7 @@ class MetasploitModule < Msf::Encoder
def encode_block(state, buf) def encode_block(state, buf)
# Have to have these for the decoder stub, so if they're not available, # Have to have these for the decoder stub, so if they're not available,
# there's nothing we can do here. # there's nothing we can do here.
["(",")",".","_","c","h","r","e","v","a","l","b","s","6","4","d","o"].each do |c| %w{c h r ( ) . e v a l b a s e 6 4 _ d e c o d e ;}.uniq.each do |c|
raise BadcharError if state.badchars.include?(c) raise BadcharError if state.badchars.include?(c)
end end
@ -38,6 +38,8 @@ class MetasploitModule < Msf::Encoder
# characters, only part of the payload gets unencoded on the victim, # characters, only part of the payload gets unencoded on the victim,
# presumably due to a limitation in PHP identifier name lengths, so we # presumably due to a limitation in PHP identifier name lengths, so we
# break the encoded payload into roughly 900-byte chunks. # break the encoded payload into roughly 900-byte chunks.
#
# https://wiki.php.net/rfc/deprecate-bareword-strings
b64 = Rex::Text.encode_base64(buf) b64 = Rex::Text.encode_base64(buf)

7
modules/payloads/singles/cmd/unix/reverse_bash.rb
View File

@ -19,9 +19,10 @@ module MetasploitModule
'Name' => 'Unix Command Shell, Reverse TCP (/dev/tcp)', 'Name' => 'Unix Command Shell, Reverse TCP (/dev/tcp)',
'Description' => %q{ 'Description' => %q{
Creates an interactive shell via bash's builtin /dev/tcp. Creates an interactive shell via bash's builtin /dev/tcp.
This will not work on most Debian-based Linux distributions
(including Ubuntu) because they compile bash without the This will not work on circa 2009 and older Debian-based Linux
/dev/tcp feature. distributions (including Ubuntu) because they compile bash
without the /dev/tcp feature.
}, },
'Author' => 'hdm', 'Author' => 'hdm',
'License' => MSF_LICENSE, 'License' => MSF_LICENSE,