metasploit-payloads 2.0.147 → 2.0.149

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 81cfde1ea52fcda95eb78fcf78f124e872577e58957110c41e0650a662d230ec
-  data.tar.gz: 976224c2571cef9fec88b0aa77519f857287688e790ff835c029eafde6ce3121
+  metadata.gz: 24962c8ef23eb687839846df041f25aae5b6b4995666bda76b9145580f9b4a25
+  data.tar.gz: c7560d8bd221fa0388483103898d048535d1731b97c407909295df5f0b0717fd
 SHA512:
-  metadata.gz: f94ce694e81a6d5655da61956ed39cbd1a40dc9461c13a7c1780a944034e5dbf01986b81b05c741650dc94cf0b59788d9ae7d5b1ee87ec7883358cf85e295f31
-  data.tar.gz: 6c0508bf78c348d8214cb9094dad6b9d41e23c403c72eb3d44e1e38cdb87e2f825b8f2c22e0dfc0ba3b0db6222d5e8b113c9869873c3c75db34d5fe657bcea3b
+  metadata.gz: 984fee4edb7eccfce9776bcb65787f530d392ae4e5084812b890ade1e8ae02ccf3aea5204ed8726dfb92e3dae0e0c2d5291aaf22f0e42a883399abeb5124950e
+  data.tar.gz: 0e646a887c0a22ebb3ad28a8276d697881e5947fca571e4003d6c5744e6b55a81d6dfee470aab052574c734b8c97843328eb8d6daf4c33e976e6482768988c0a

checksums.yaml.gz.sig

@@ -1,3 +1 @@
-����'Q��˓�q�&�������5�{�y��if���5
�~�)@��8��)U��e�����ZD��"������LJ@|�9c�ҭοQ�%�.��rjJ�2Y��#��j�a�̛rtU=����
-��„�oUOay�����q�s=���ց�ь��#�*ѓ�bm�)��4����҈�
-���?����tˊ�3��لۼuVݰxֲ1�o���+�ݣ��h#����
+\r&9�7&��S5��Ǝ�b5�H��p�����7<�D���u�10d�G�NHf���Y�4�[

data/data/meterpreter/ext_server_stdapi.php

@@ -21,7 +21,7 @@ define("TLV_TYPE_FILE_MODE",           TLV_META_TYPE_STRING  | 1203);
 define("TLV_TYPE_FILE_SIZE",           TLV_META_TYPE_UINT    | 1204);
 define("TLV_TYPE_FILE_HASH",           TLV_META_TYPE_RAW     | 1206);
 
-define("TLV_TYPE_STAT_BUF32",          TLV_META_TYPE_COMPLEX | 1220);
+define("TLV_TYPE_STAT_BUF",            TLV_META_TYPE_COMPLEX | 1221);
 
 define("TLV_TYPE_SEARCH_RECURSE",      TLV_META_TYPE_BOOL    | 1230);
 define("TLV_TYPE_SEARCH_GLOB",         TLV_META_TYPE_STRING  | 1231);
@@ -429,25 +429,40 @@ function add_stat_buf($path) {
     if ($st) {
         $st_buf = "";
         $st_buf .= pack("V", $st['dev']);
-        $st_buf .= pack("v", $st['ino']);
-        $st_buf .= pack("v", $st['mode']);
-        $st_buf .= pack("v", 0);
-        $st_buf .= pack("v", $st['nlink']);
-        $st_buf .= pack("v", $st['uid']);
-        $st_buf .= pack("v", $st['gid']);
+        $st_buf .= pack("V", $st['mode']);
+        $st_buf .= pack("V", $st['nlink']);
+        $st_buf .= pack("V", $st['uid']);
+        $st_buf .= pack("V", $st['gid']);
         $st_buf .= pack("V", $st['rdev']);
-        $st_buf .= pack("V", $st['size']);
-        $st_buf .= pack("V", $st['ctime']);
-        $st_buf .= pack("V", $st['atime']);
-        $st_buf .= pack("V", $st['mtime']);
+
+        $st_buf .= pack_p($st['ino']);
+        $st_buf .= pack_p($st['size']);
+        $st_buf .= pack_p($st['atime']);
+        $st_buf .= pack_p($st['mtime']);
+        $st_buf .= pack_p($st['ctime']);
+        
         $st_buf .= pack("V", $st['blksize']);
         $st_buf .= pack("V", $st['blocks']);
-        return create_tlv(TLV_TYPE_STAT_BUF32, $st_buf);
+       
+        return create_tlv(TLV_TYPE_STAT_BUF, $st_buf);
     }
     return false;
 }
 }
 
+if(!function_exists('pack_p')) {
+# Implements pack('P', $value) - but backwards compatible to PHP4.x
+# https://www.php.net/manual/en/function.pack.php
+# Directive:
+#   P   unsigned long long (always 64 bit, little endian byte order)
+function pack_p($value) {
+    $first_half = pack('V', $value & 0xffffffff);
+    $second_half = pack('V', ($value >> 32) & 0xffffffff);
+
+    return $first_half . $second_half;
+}
+}
+
 if (!function_exists('resolve_host')) {
 function resolve_host($hostname, $family) {
     /* requires PHP >= 5 */
@@ -655,7 +670,7 @@ function stdapi_fs_ls($req, &$pkt) {
                 packet_add_tlv($pkt, create_tlv(TLV_TYPE_FILE_PATH, $path . DIRECTORY_SEPARATOR . $file));
                 $st_buf = add_stat_buf($path . DIRECTORY_SEPARATOR . $file);
                 if (!$st_buf) {
-                    $st_buf = create_tlv(TLV_TYPE_STAT_BUF32, '');
+                    $st_buf = create_tlv(TLV_TYPE_STAT_BUF, '');
                 }
                 packet_add_tlv($pkt, $st_buf);
             }

data/lib/metasploit-payloads/version.rb

@@ -1,6 +1,6 @@
 # -*- coding:binary -*-
 module MetasploitPayloads
-  VERSION = '2.0.147'
+  VERSION = '2.0.149'
 
   def self.version
     VERSION

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: metasploit-payloads
 version: !ruby/object:Gem::Version
-  version: 2.0.147
+  version: 2.0.149
 platform: ruby
 authors:
 - OJ Reeves
@@ -96,7 +96,7 @@ cert_chain:
   EknWpNgVhohbot1lfVAMmIhdtOVaRVcQQixWPwprDj/ydB8ryDMDosIMcw+fkoXU
   9GJsSaSRRYQ9UUkVL27b64okU8D48m8=
   -----END CERTIFICATE-----
-date: 2023-06-28 00:00:00.000000000 Z
+date: 2023-07-11 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rake