metasploit-payloads 2.0.106 → 2.0.108

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 453b3c01afd395af3790b8a9393781f8a90c372945a8b9b4fa597bff94ec47ee
-  data.tar.gz: 16129f118a5a4cee8b66e4a37b824ecf8e0aed43be918ea9b5ef0b9a566d58bc
+  metadata.gz: 8b2e2cb12a89c4b055997fa3dcce68de37ba85753595a53658fcbb6e85c6857f
+  data.tar.gz: bc026282a9499ede5356004abf9b91affbefdd44d9da805f056dadaa889a44d3
 SHA512:
-  metadata.gz: 263ccd130cdac66596843e65b9eac343be1bf554896eef1903a6180cf6955326b967a901b0fe7bef73a9e1f1435178d2d47e74aee1c7f4d247e565504726030b
-  data.tar.gz: 63b34db9fe29f7c6bd2d643b40b6a3fdc3963e994226235888de75da78e5d918caa911734b652dfea415a00f4211dede45180e02334fe8111644ba761e17bdc7
+  metadata.gz: 9a5fe117aa8cc0db6c32911912814d5367c2fd40ef0fcde3407a47733f46ce483c213045fa50cfca561420064fdf4963eb530eb3d2fd6db050aff079af4a292a
+  data.tar.gz: 4cf53ffdd0f3bb5a2413c06a30834d8b5129321a3eb6a397c2b2771bd11b53df2d2deac8c618fb0cadd56b8395e6db42bd04604079255300cc1c4b68bdf1cf43

data/data/meterpreter/ext_server_stdapi.py

@@ -1133,15 +1133,24 @@ def channel_open_stdapi_net_tcp_client(request, response):
 
 @register_function
 def channel_open_stdapi_net_tcp_server(request, response):
-    local_host = packet_get_tlv(request, TLV_TYPE_LOCAL_HOST).get('value', '0.0.0.0')
+    use_dual_stack = False
+    local_host = packet_get_tlv(request, TLV_TYPE_LOCAL_HOST).get('value', '')
     local_port = packet_get_tlv(request, TLV_TYPE_LOCAL_PORT)['value']
-    local_address_info = getaddrinfo(local_host, local_port, socktype=socket.SOCK_STREAM, proto=socket.IPPROTO_TCP)
-    if not local_address_info:
-        return ERROR_FAILURE, response
-    local_address_info = local_address_info[0]
-    server_sock = socket.socket(local_address_info['family'], local_address_info['socktype'], local_address_info['proto'])
+    if local_host:
+        local_address_info = getaddrinfo(local_host, local_port, socktype=socket.SOCK_STREAM, proto=socket.IPPROTO_TCP, flags=socket.AI_NUMERICHOST)
+        if not local_address_info:
+            return ERROR_FAILURE, response
+        local_address_info = local_address_info[0]
+    else:
+        local_address_info = {
+            'family': socket.AF_INET6,
+            'sockaddr': ('::', local_port, 0, 0)
+        }
+        use_dual_stack = hasattr(socket, 'IPV6_V6ONLY')
+        debug_print('[*] no local host information, binding to all available interfaces...')
+    server_sock = socket.socket(local_address_info['family'], socket.SOCK_STREAM, socket.IPPROTO_TCP)
     server_sock.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1)
-    if local_address_info['family'] == socket.AF_INET6 and hasattr(socket, 'IPV6_V6ONLY'):
+    if local_address_info['family'] == socket.AF_INET6 and use_dual_stack:
         server_sock.setsockopt(socket.IPPROTO_IPV6, socket.IPV6_V6ONLY, 0)
     server_sock.bind(local_address_info['sockaddr'])
     server_sock.listen(socket.SOMAXCONN)

data/lib/metasploit-payloads/version.rb

@@ -1,6 +1,6 @@
 # -*- coding:binary -*-
 module MetasploitPayloads
-  VERSION = '2.0.106'
+  VERSION = '2.0.108'
 
   def self.version
     VERSION

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: metasploit-payloads
 version: !ruby/object:Gem::Version
-  version: 2.0.106
+  version: 2.0.108
 platform: ruby
 authors:
 - OJ Reeves
@@ -96,7 +96,7 @@ cert_chain:
   EknWpNgVhohbot1lfVAMmIhdtOVaRVcQQixWPwprDj/ydB8ryDMDosIMcw+fkoXU
   9GJsSaSRRYQ9UUkVL27b64okU8D48m8=
   -----END CERTIFICATE-----
-date: 2023-01-12 00:00:00.000000000 Z
+date: 2023-01-19 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rake