metasploit-payloads 2.0.146 → 2.0.148

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a695570653272110d9cc50296602a02485433e0311bb6fe0f1a9e25972a7205c
-  data.tar.gz: efdb8e928a925f21b576c637cf4a6a761144960101a5542d8234152a2907957c
+  metadata.gz: 20851bb98a3cde9efa3f4034f8dc91aea78227c0a2045184ca2aa220a4f83299
+  data.tar.gz: de392b84384a87cad25930a1e8b2d4d29c87847a1194753a58f6756eacb5e12b
 SHA512:
-  metadata.gz: 80a2c79fe93d6ffa444e40b3fbae50625e9a4f5249946c573a9c1046797ba88794d415d1d783dfe4a5f1d3be015ac0051186c3d649af773c894a7b9b52f13292
-  data.tar.gz: 9601afeea9ff7d54c7b71fdc3aa58aa70a9541cc4ebee7287b00aff53c0310f633d22ee640f901c99ada9d0aecece0f768566a080dae4c2e27b0bce5396d2e20
+  metadata.gz: f18f1787b6b38a0f87c565640200151ebf05ffdfb46f84eeddc8abae8b52c3d6e34f2872bf5cbcb8e3a00c775507b281a17e485cfe8732c4e6633316f60bd051
+  data.tar.gz: 2fabc289a77db3f729b3abc4c5cd0033ddf460b1964e2c17320957a3a01124f61f2e08852ecccc1c5f2938e45a06df9ebab37f11bd1e857290ab502999538782

data/data/meterpreter/ext_server_stdapi.php

@@ -21,7 +21,7 @@ define("TLV_TYPE_FILE_MODE",           TLV_META_TYPE_STRING  | 1203);
 define("TLV_TYPE_FILE_SIZE",           TLV_META_TYPE_UINT    | 1204);
 define("TLV_TYPE_FILE_HASH",           TLV_META_TYPE_RAW     | 1206);
 
-define("TLV_TYPE_STAT_BUF32",          TLV_META_TYPE_COMPLEX | 1220);
+define("TLV_TYPE_STAT_BUF",            TLV_META_TYPE_COMPLEX | 1221);
 
 define("TLV_TYPE_SEARCH_RECURSE",      TLV_META_TYPE_BOOL    | 1230);
 define("TLV_TYPE_SEARCH_GLOB",         TLV_META_TYPE_STRING  | 1231);
@@ -429,25 +429,40 @@ function add_stat_buf($path) {
     if ($st) {
         $st_buf = "";
         $st_buf .= pack("V", $st['dev']);
-        $st_buf .= pack("v", $st['ino']);
-        $st_buf .= pack("v", $st['mode']);
-        $st_buf .= pack("v", 0);
-        $st_buf .= pack("v", $st['nlink']);
-        $st_buf .= pack("v", $st['uid']);
-        $st_buf .= pack("v", $st['gid']);
+        $st_buf .= pack("V", $st['mode']);
+        $st_buf .= pack("V", $st['nlink']);
+        $st_buf .= pack("V", $st['uid']);
+        $st_buf .= pack("V", $st['gid']);
         $st_buf .= pack("V", $st['rdev']);
-        $st_buf .= pack("V", $st['size']);
-        $st_buf .= pack("V", $st['ctime']);
-        $st_buf .= pack("V", $st['atime']);
-        $st_buf .= pack("V", $st['mtime']);
+
+        $st_buf .= pack_p($st['ino']);
+        $st_buf .= pack_p($st['size']);
+        $st_buf .= pack_p($st['atime']);
+        $st_buf .= pack_p($st['mtime']);
+        $st_buf .= pack_p($st['ctime']);
+        
         $st_buf .= pack("V", $st['blksize']);
         $st_buf .= pack("V", $st['blocks']);
-        return create_tlv(TLV_TYPE_STAT_BUF32, $st_buf);
+       
+        return create_tlv(TLV_TYPE_STAT_BUF, $st_buf);
     }
     return false;
 }
 }
 
+if(!function_exists('pack_p')) {
+# Implements pack('P', $value) - but backwards compatible to PHP4.x
+# https://www.php.net/manual/en/function.pack.php
+# Directive:
+#   P   unsigned long long (always 64 bit, little endian byte order)
+function pack_p($value) {
+    $first_half = pack('V', $value & 0xffffffff);
+    $second_half = pack('V', ($value >> 32) & 0xffffffff);
+
+    return $first_half . $second_half;
+}
+}
+
 if (!function_exists('resolve_host')) {
 function resolve_host($hostname, $family) {
     /* requires PHP >= 5 */
@@ -655,7 +670,7 @@ function stdapi_fs_ls($req, &$pkt) {
                 packet_add_tlv($pkt, create_tlv(TLV_TYPE_FILE_PATH, $path . DIRECTORY_SEPARATOR . $file));
                 $st_buf = add_stat_buf($path . DIRECTORY_SEPARATOR . $file);
                 if (!$st_buf) {
-                    $st_buf = create_tlv(TLV_TYPE_STAT_BUF32, '');
+                    $st_buf = create_tlv(TLV_TYPE_STAT_BUF, '');
                 }
                 packet_add_tlv($pkt, $st_buf);
             }

data/lib/metasploit-payloads/version.rb

@@ -1,6 +1,6 @@
 # -*- coding:binary -*-
 module MetasploitPayloads
-  VERSION = '2.0.146'
+  VERSION = '2.0.148'
 
   def self.version
     VERSION

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: metasploit-payloads
 version: !ruby/object:Gem::Version
-  version: 2.0.146
+  version: 2.0.148
 platform: ruby
 authors:
 - OJ Reeves
@@ -96,7 +96,7 @@ cert_chain:
   EknWpNgVhohbot1lfVAMmIhdtOVaRVcQQixWPwprDj/ydB8ryDMDosIMcw+fkoXU
   9GJsSaSRRYQ9UUkVL27b64okU8D48m8=
   -----END CERTIFICATE-----
-date: 2023-06-28 00:00:00.000000000 Z
+date: 2023-06-30 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rake