metasploit-payloads 2.0.157 → 2.0.159

Sign up to get free protection for your applications and to get access to all the features.
Files changed (111) hide show
  1. checksums.yaml +4 -4
  2. checksums.yaml.gz.sig +3 -2
  3. data/Rakefile +35 -9
  4. data/data/android/apk/AndroidManifest.xml +0 -0
  5. data/data/android/apk/classes.dex +0 -0
  6. data/data/android/apk/resources.arsc +0 -0
  7. data/data/android/meterpreter.dex +0 -0
  8. data/data/android/meterpreter.jar +0 -0
  9. data/data/android/metstage.jar +0 -0
  10. data/data/android/shell.jar +0 -0
  11. data/data/java/com/metasploit/meterpreter/JarFileClassLoader.class +0 -0
  12. data/data/java/javapayload/stage/Meterpreter.class +0 -0
  13. data/data/java/javapayload/stage/Shell.class +0 -0
  14. data/data/java/javapayload/stage/Stage.class +0 -0
  15. data/data/java/javapayload/stage/StreamForwarder.class +0 -0
  16. data/data/java/metasploit/AESEncryption.class +0 -0
  17. data/data/java/metasploit/JMXPayload.class +0 -0
  18. data/data/java/metasploit/JMXPayloadMBean.class +0 -0
  19. data/data/java/metasploit/Payload.class +0 -0
  20. data/data/java/metasploit/PayloadServlet.class +0 -0
  21. data/data/java/metasploit/PayloadTrustManager.class +0 -0
  22. data/data/java/metasploit/RMILoader.class +0 -0
  23. data/data/java/metasploit/RMIPayload.class +0 -0
  24. data/data/meterpreter/dump_sam.x64.debug.dll +0 -0
  25. data/data/meterpreter/dump_sam.x64.dll +0 -0
  26. data/data/meterpreter/dump_sam.x86.debug.dll +0 -0
  27. data/data/meterpreter/dump_sam.x86.dll +0 -0
  28. data/data/meterpreter/elevator.x64.debug.dll +0 -0
  29. data/data/meterpreter/elevator.x64.dll +0 -0
  30. data/data/meterpreter/elevator.x86.debug.dll +0 -0
  31. data/data/meterpreter/elevator.x86.dll +0 -0
  32. data/data/meterpreter/ext_server_bofloader.x64.debug.dll +0 -0
  33. data/data/meterpreter/ext_server_bofloader.x64.dll +0 -0
  34. data/data/meterpreter/ext_server_bofloader.x86.debug.dll +0 -0
  35. data/data/meterpreter/ext_server_bofloader.x86.dll +0 -0
  36. data/data/meterpreter/ext_server_espia.x64.debug.dll +0 -0
  37. data/data/meterpreter/ext_server_espia.x64.dll +0 -0
  38. data/data/meterpreter/ext_server_espia.x86.debug.dll +0 -0
  39. data/data/meterpreter/ext_server_espia.x86.dll +0 -0
  40. data/data/meterpreter/ext_server_extapi.x64.debug.dll +0 -0
  41. data/data/meterpreter/ext_server_extapi.x64.dll +0 -0
  42. data/data/meterpreter/ext_server_extapi.x86.debug.dll +0 -0
  43. data/data/meterpreter/ext_server_extapi.x86.dll +0 -0
  44. data/data/meterpreter/ext_server_incognito.x64.debug.dll +0 -0
  45. data/data/meterpreter/ext_server_incognito.x64.dll +0 -0
  46. data/data/meterpreter/ext_server_incognito.x86.debug.dll +0 -0
  47. data/data/meterpreter/ext_server_incognito.x86.dll +0 -0
  48. data/data/meterpreter/ext_server_kiwi.x64.debug.dll +0 -0
  49. data/data/meterpreter/ext_server_kiwi.x64.dll +0 -0
  50. data/data/meterpreter/ext_server_kiwi.x86.debug.dll +0 -0
  51. data/data/meterpreter/ext_server_kiwi.x86.dll +0 -0
  52. data/data/meterpreter/ext_server_lanattacks.x64.debug.dll +0 -0
  53. data/data/meterpreter/ext_server_lanattacks.x64.dll +0 -0
  54. data/data/meterpreter/ext_server_lanattacks.x86.debug.dll +0 -0
  55. data/data/meterpreter/ext_server_lanattacks.x86.dll +0 -0
  56. data/data/meterpreter/ext_server_peinjector.x64.debug.dll +0 -0
  57. data/data/meterpreter/ext_server_peinjector.x64.dll +0 -0
  58. data/data/meterpreter/ext_server_peinjector.x86.debug.dll +0 -0
  59. data/data/meterpreter/ext_server_peinjector.x86.dll +0 -0
  60. data/data/meterpreter/ext_server_powershell.x64.debug.dll +0 -0
  61. data/data/meterpreter/ext_server_powershell.x64.dll +0 -0
  62. data/data/meterpreter/ext_server_powershell.x86.debug.dll +0 -0
  63. data/data/meterpreter/ext_server_powershell.x86.dll +0 -0
  64. data/data/meterpreter/ext_server_priv.x64.debug.dll +0 -0
  65. data/data/meterpreter/ext_server_priv.x64.dll +0 -0
  66. data/data/meterpreter/ext_server_priv.x86.debug.dll +0 -0
  67. data/data/meterpreter/ext_server_priv.x86.dll +0 -0
  68. data/data/meterpreter/ext_server_python.x64.debug.dll +0 -0
  69. data/data/meterpreter/ext_server_python.x64.dll +0 -0
  70. data/data/meterpreter/ext_server_python.x86.debug.dll +0 -0
  71. data/data/meterpreter/ext_server_python.x86.dll +0 -0
  72. data/data/meterpreter/ext_server_sniffer.x64.dll +0 -0
  73. data/data/meterpreter/ext_server_sniffer.x86.dll +0 -0
  74. data/data/meterpreter/ext_server_stdapi.jar +0 -0
  75. data/data/meterpreter/ext_server_stdapi.php +0 -0
  76. data/data/meterpreter/ext_server_stdapi.py +0 -0
  77. data/data/meterpreter/ext_server_stdapi.x64.debug.dll +0 -0
  78. data/data/meterpreter/ext_server_stdapi.x64.dll +0 -0
  79. data/data/meterpreter/ext_server_stdapi.x86.debug.dll +0 -0
  80. data/data/meterpreter/ext_server_stdapi.x86.dll +0 -0
  81. data/data/meterpreter/ext_server_unhook.x64.debug.dll +0 -0
  82. data/data/meterpreter/ext_server_unhook.x64.dll +0 -0
  83. data/data/meterpreter/ext_server_unhook.x86.debug.dll +0 -0
  84. data/data/meterpreter/ext_server_unhook.x86.dll +0 -0
  85. data/data/meterpreter/ext_server_winpmem.x64.debug.dll +0 -0
  86. data/data/meterpreter/ext_server_winpmem.x64.dll +0 -0
  87. data/data/meterpreter/ext_server_winpmem.x86.debug.dll +0 -0
  88. data/data/meterpreter/ext_server_winpmem.x86.dll +0 -0
  89. data/data/meterpreter/meterpreter.jar +0 -0
  90. data/data/meterpreter/meterpreter.php +0 -0
  91. data/data/meterpreter/meterpreter.py +0 -0
  92. data/data/meterpreter/metsrv.x64.debug.dll +0 -0
  93. data/data/meterpreter/metsrv.x64.dll +0 -0
  94. data/data/meterpreter/metsrv.x86.debug.dll +0 -0
  95. data/data/meterpreter/metsrv.x86.dll +0 -0
  96. data/data/meterpreter/screenshot.x64.debug.dll +0 -0
  97. data/data/meterpreter/screenshot.x64.dll +0 -0
  98. data/data/meterpreter/screenshot.x86.debug.dll +0 -0
  99. data/data/meterpreter/screenshot.x86.dll +0 -0
  100. data/data/meterpreter/tests/test_ext_server_stdapi.py +0 -0
  101. data/lib/metasploit-payloads/crypto.rb +46 -20
  102. data/lib/metasploit-payloads/version.rb +1 -1
  103. data/lib/metasploit-payloads.rb +0 -3
  104. data/manifest +97 -96
  105. data/manifest.uuid +1 -1
  106. data/spec/metasploit_payloads/crypto_spec.rb +36 -10
  107. data/spec/metasploit_payloads/metasploit_payloads_spec.rb +3 -3
  108. data/spec/spec_helper.rb +0 -2
  109. data.tar.gz.sig +0 -0
  110. metadata +3 -2
  111. metadata.gz.sig +0 -0
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 438bb2951a59864af18156abc58f00221f6e18711d5c5daeded76faa04d5ede6
4
- data.tar.gz: 32c3b9800d310087ebbc29660911f68674ac7316a73af2c1176332618343a10f
3
+ metadata.gz: 261c1e7f88ff13796e06b445efe261dd46d7e1259eeabb9227d3d6dff5dab03a
4
+ data.tar.gz: 66b1a298e8e8e9f2829d19634dd5ecb63a66d730975ac633c3ffdfd3668c927e
5
5
  SHA512:
6
- metadata.gz: 507621be0a3dfce9c65c23ad1f2db04d4d00305c676874c205a9427bff46f5cacacc40eb51f6157c5f54afd608a1acf5fbc3e08f8e5066a56d831b8ecf87b12f
7
- data.tar.gz: 3b95b280c79c029e2ee0f8fd3e548b7c575c11be0147e54692aed795bb56b8a1b3876a3a9d8883cf84439cd11288220dc537f4702f1f8271562eb56385ac69f4
6
+ metadata.gz: a04ef0b9d19ad46176abf850a006aee42be33fdbe358560a986df6e0607810692be8f635ea221d0f13c8963a7953876baeaa265d83e016ea018d4cb0dac87462
7
+ data.tar.gz: 787ad858e2bb6ba5bebe8cd234e2ea5b159fa1997ed57305ed09cf0e58734008e6d1289797a3a9b94ca010cd9673b496275c7ba497dec5d1f70c59035f2eda8c
checksums.yaml.gz.sig CHANGED
@@ -1,2 +1,3 @@
1
- ��l����m�(7��,�3�4Dn�-J�H :<;4�sd�����7E�f�8+��dy�)t�C&���$>qWRѳ�E��6���C𕩪a�\WSX���h6'�
2
- _�+g]ީǛ}q��� rIF��N?�=P)���R*�}���B�x`}�D��g�
1
+ ���d�����*{Y~ghA
2
+ jRZ,��S���AjI�4h+`*���/p� "�nt��Rv��F�i�� �i���fb2_3K�P�C]&����0��-2�M�m`�c�91J��^��H��x��2
3
+ UH!͵�!ʻs�-�*���¯w0���v��OK:i�S������l�ϵ��d2UX�9��f�E���F^`�!Xb���!� �2`����y �A�vH�)�t��QBJ��Bz�vùY�9�
data/Rakefile CHANGED
@@ -8,6 +8,8 @@ php_source = "../php/meterpreter/"
8
8
  python_source = "../python/meterpreter/"
9
9
  dest = "./data"
10
10
  meterpreter_dest = "./data/meterpreter"
11
+ android_dest = "./data/android"
12
+ java_dest = "./data/java"
11
13
  manifest_file = './manifest'
12
14
  manifest_uuid_file = './manifest.uuid'
13
15
  manifest_hash_type = 'SHA3-256'
@@ -21,7 +23,7 @@ platform_config = {
21
23
  "dll"
22
24
  ]
23
25
  },
24
- :java => {
26
+ :java_meterpreter => {
25
27
  :sources => [
26
28
  "../java/output/data/meterpreter"
27
29
  ],
@@ -29,6 +31,25 @@ platform_config = {
29
31
  "jar"
30
32
  ],
31
33
  },
34
+ :java_output => {
35
+ :sources => [
36
+ "../java/output/data/java"
37
+ ],
38
+ :extensions => [
39
+ "class"
40
+ ]
41
+ },
42
+ :android => {
43
+ :sources => [
44
+ "../java/output/data/android"
45
+ ],
46
+ :extensions => [
47
+ "jar",
48
+ "dex",
49
+ "xml",
50
+ "arsc"
51
+ ]
52
+ },
32
53
  :php => {
33
54
  :sources => [
34
55
  php_source
@@ -50,12 +71,16 @@ platform_config = {
50
71
  def copy_files(cnf, meterpreter_dest)
51
72
  cnf[:sources].each do |f|
52
73
  cnf[:extensions].each do |ext|
53
- Dir.glob("#{f}/*.#{ext}").each do |bin|
54
- target = File.join(meterpreter_dest, File.basename(bin))
74
+ Dir.glob("#{f}/**/*.#{ext}").each do |bin|
75
+ f_path = ::Pathname.new(f)
76
+ bin_path = ::Pathname.new(bin)
77
+ target = File.join(meterpreter_dest, bin_path.relative_path_from(f_path))
55
78
  print("Copying: #{bin} -> #{target}\n")
56
- contents = ::File.binread(::File.expand_path(bin))
79
+ contents = ::File.binread(bin_path)
57
80
  encrypted_contents = ::MetasploitPayloads::Crypto.encrypt(plaintext: contents)
58
- ::File.binwrite(::File.expand_path(target), encrypted_contents)
81
+ output = ::Pathname.new(::File.expand_path(target))
82
+ ::FileUtils.mkdir_p(output.dirname) unless output.dirname.exist?
83
+ ::File.binwrite(output, encrypted_contents)
59
84
  end
60
85
  end
61
86
  end
@@ -64,6 +89,8 @@ end
64
89
  task :create_dir do
65
90
  Dir.mkdir(dest) unless Dir.exist?(dest)
66
91
  Dir.mkdir(meterpreter_dest) unless Dir.exist?(meterpreter_dest)
92
+ Dir.mkdir(java_dest) unless Dir.exist?(java_dest)
93
+ Dir.mkdir(android_dest) unless Dir.exist?(android_dest)
67
94
  end
68
95
 
69
96
  task :win_compile do
@@ -83,10 +110,9 @@ task :win_copy do
83
110
  end
84
111
 
85
112
  task :java_copy do
86
- copy_files(platform_config[:java], meterpreter_dest)
87
- FileUtils.remove_entry_secure('./java', :force => true)
88
- FileUtils.cp_r('../java/output/data/android', dest)
89
- FileUtils.cp_r('../java/output/data/java', dest)
113
+ copy_files(platform_config[:java_meterpreter], meterpreter_dest)
114
+ copy_files(platform_config[:java_output], java_dest)
115
+ copy_files(platform_config[:android], android_dest)
90
116
  end
91
117
 
92
118
  task :php_copy do
Binary file
Binary file
Binary file
Binary file
Binary file
Binary file
Binary file
Binary file
Binary file
Binary file
Binary file
Binary file
Binary file
Binary file
Binary file
Binary file
Binary file
Binary file
Binary file
Binary file
Binary file
Binary file
Binary file
Binary file
Binary file
Binary file
Binary file
@@ -3,25 +3,42 @@ require 'openssl'
3
3
  module MetasploitPayloads
4
4
  module Crypto
5
5
  CIPHERS = {
6
- chacha20: {
6
+ 1 => {
7
7
  name: 'chacha20'.b,
8
- version: 1,
9
- iv: {
10
- value: "\x52\x25\xd7\xab\x52\x8f\x3f\xf8\x94\x97\x08\x42\x33\xb9\xd3\xb6".b, # 16 bytes
11
- version: 1
8
+ version: { iv: 1, key: 1 },
9
+ ivs: {
10
+ 1 => {
11
+ value: "\x52\x25\xd7\xab\x52\x8f\x3f\xf8\x94\x97\x08\x42\x33\xb9\xd3\xb6".b # 16 bytes
12
+ }
12
13
  },
13
- key: {
14
- value: "\x28\x39\x97\x4c\x95\x11\x9d\x42\x6c\x8b\xff\x43\x3e\x5d\x3c\x33\x1b\x95\xd3\xea\xeb\xc9\xae\x71\x0a\x36\xe7\x98\x3d\x9d\x09\x52".b, # 32 bytes
15
- version: 1
14
+ keys: {
15
+ 1 => {
16
+ value: "\x28\x39\x97\x4c\x95\x11\x9d\x42\x6c\x8b\xff\x43\x3e\x5d\x3c\x33\x1b\x95\xd3\xea\xeb\xc9\xae\x71\x0a\x36\xe7\x98\x3d\x9d\x09\x52".b, # 32 bytes
17
+ }
18
+ }
19
+ },
20
+ 2 => {
21
+ name: 'aes-256-cbc'.b,
22
+ version: { iv: 1, key: 1 },
23
+ ivs: {
24
+ 1 => {
25
+ value: "\x3c\x09\x85\x95\x19\x09\x10\xff\x76\xf0\x48\xf7\x21\x1a\x5c\x59".b, # 16 bytes
26
+ }
27
+ },
28
+ keys: {
29
+ 1 => {
30
+ value: "\x01\x93\x90\xfb\x84\xcd\x70\x16\x90\x1d\xc6\xf4\xf2\xfd\xcf\x59\xc4\x9c\x26\x35\x29\x67\x8c\x2d\x17\xb9\x35\xcb\x7d\xb0\x88\x7a".b, # 32 bytes
31
+ }
16
32
  }
17
33
  }
18
34
  }.freeze
19
- CURRENT_CIPHER = CIPHERS[:chacha20]
20
- CIPHER_VERSION = CURRENT_CIPHER[:version]
21
- KEY_VERSION = CURRENT_CIPHER[:key][:version]
22
- IV_VERSION = CURRENT_CIPHER[:iv][:version]
35
+ CIPHER_VERSION = 2
36
+ CURRENT_CIPHER = CIPHERS[CIPHER_VERSION]
37
+ KEY_VERSION = CURRENT_CIPHER[:version][:key]
38
+ IV_VERSION = CURRENT_CIPHER[:version][:iv]
39
+
23
40
  # Binary String, unsigned char, unsigned char, unsigned char
24
- ENCRYPTED_PAYLOAD_HEADER = ['msf', CIPHER_VERSION, IV_VERSION, KEY_VERSION].pack('A*CCC')
41
+ ENCRYPTED_PAYLOAD_HEADER = ['msf', CIPHER_VERSION, IV_VERSION, KEY_VERSION].pack('A*CCC').freeze
25
42
 
26
43
  private_constant :CIPHERS
27
44
  private_constant :CURRENT_CIPHER
@@ -35,8 +52,8 @@ module MetasploitPayloads
35
52
  cipher = ::OpenSSL::Cipher.new(CURRENT_CIPHER[:name])
36
53
 
37
54
  cipher.encrypt
38
- cipher.iv = CURRENT_CIPHER[:iv][:value]
39
- cipher.key = CURRENT_CIPHER[:key][:value]
55
+ cipher.iv = CURRENT_CIPHER[:ivs][IV_VERSION][:value]
56
+ cipher.key = CURRENT_CIPHER[:keys][KEY_VERSION][:value]
40
57
 
41
58
  output = ENCRYPTED_PAYLOAD_HEADER.dup
42
59
  output << cipher.update(plaintext)
@@ -48,14 +65,23 @@ module MetasploitPayloads
48
65
  def self.decrypt(ciphertext: '')
49
66
  raise ::ArgumentError, 'Unable to decrypt ciphertext: ' << ciphertext, caller unless ciphertext.to_s
50
67
 
51
- cipher = ::OpenSSL::Cipher.new(CURRENT_CIPHER[:name])
68
+ return ciphertext unless ciphertext.start_with?('msf'.b)
69
+
70
+ # Use the correct algorithm based on the version in the header
71
+ msf_header, cipher_version, iv_version, key_version = ciphertext.unpack('A3CCC')
72
+
73
+ current_cipher = CIPHERS[cipher_version]
74
+ cipher = ::OpenSSL::Cipher.new(current_cipher[:name])
75
+ iv = current_cipher[:ivs][iv_version][:value]
76
+ key = current_cipher[:keys][key_version][:value]
52
77
 
53
78
  cipher.decrypt
54
- cipher.iv = CURRENT_CIPHER[:iv][:value]
55
- cipher.key = CURRENT_CIPHER[:key][:value]
79
+ cipher.iv = iv
80
+ cipher.key = key
56
81
 
57
- # Remove encrypted header if present
58
- ciphertext = ciphertext.sub(ENCRYPTED_PAYLOAD_HEADER, '')
82
+ header = [msf_header, cipher_version, iv_version, key_version].pack('A*CCC').b
83
+ # Remove encrypted header
84
+ ciphertext = ciphertext.sub(header, '')
59
85
 
60
86
  output = cipher.update(ciphertext)
61
87
  output << cipher.final
@@ -1,6 +1,6 @@
1
1
  # -*- coding:binary -*-
2
2
  module MetasploitPayloads
3
- VERSION = '2.0.157'
3
+ VERSION = '2.0.159'
4
4
 
5
5
  def self.version
6
6
  VERSION
@@ -154,9 +154,6 @@ module MetasploitPayloads
154
154
  raise e
155
155
  end
156
156
 
157
- encrypted_file = file_contents.start_with?(Crypto::ENCRYPTED_PAYLOAD_HEADER)
158
- return file_contents unless encrypted_file
159
-
160
157
  Crypto.decrypt(ciphertext: file_contents)
161
158
  end
162
159
 
data/manifest CHANGED
@@ -1,96 +1,97 @@
1
- ./data/android/apk/AndroidManifest.xml:SHA3-256:cff0a10406eef30a6e8b558efa6695a2e183f11ada105e2fc2342ab174f1fc95
2
- ./data/android/apk/classes.dex:SHA3-256:0ca34b9e74428678ca808e3601eb30ec78256d76a38c8eecf26e5f419837b769
3
- ./data/android/apk/resources.arsc:SHA3-256:9a6f5eb5cb24fb1f83808a67c692e66c1a698d6222db2000b8b07e595689311f
4
- ./data/android/meterpreter.dex:SHA3-256:4596cdac6b36141c35d026f6c349416097f6968f8fb95a7a1421e0fbd1da9d65
5
- ./data/android/meterpreter.jar:SHA3-256:48b774ea108004ef83dee3170919f7aa36a66806ed6acaaed46c18c2a25678a8
6
- ./data/android/metstage.jar:SHA3-256:98147a9f04130634d474cd1083b85e7163eb65de2fb0506e53c756302fffef96
7
- ./data/android/shell.jar:SHA3-256:d2470ac08d0d307402cfd6c7b86c7df6123d8ff1742161e96a6c9cd6f9731756
8
- ./data/java/com/metasploit/meterpreter/JarFileClassLoader.class:SHA3-256:70e39898965b1cdcf7efeab2fff76471950fb19d6e0d03589ff3a15705c35f2b
9
- ./data/java/javapayload/stage/Meterpreter.class:SHA3-256:7c2cada964463b28f0d9d900e4979d79a7d8931d00c514f46cf589cf7b77e2e7
10
- ./data/java/javapayload/stage/Shell.class:SHA3-256:78aeee685de937bd62a5364ca1a16a798f1c963968b829bcfcb675723d4f8650
11
- ./data/java/javapayload/stage/Stage.class:SHA3-256:d99ce29ee9dfc87830e114bf872c7f75c40eac6f759a85537a661dfdea62a003
12
- ./data/java/javapayload/stage/StreamForwarder.class:SHA3-256:d2b38771450580a68f7ff6131798d53ff979f2bcd2e5b0f444f6d90a25274599
13
- ./data/java/metasploit/AESEncryption.class:SHA3-256:66007714b525a8151208e133755f7e0fe1fbf1bd27fe11618722d428886fbb69
14
- ./data/java/metasploit/JMXPayload.class:SHA3-256:74a131478fd1afa1c863cc000674cf145182ece98e8f8cfba5e406022d6be0e9
15
- ./data/java/metasploit/JMXPayloadMBean.class:SHA3-256:58e5dd1100a80110264f249e01eca58a56ed05f255f70fc30b67e1c0859d7873
16
- ./data/java/metasploit/Payload.class:SHA3-256:c53080cf5ab6ea1d57cd1430419234fc0146e0d5cb970db569e4ddabcf3e0c66
17
- ./data/java/metasploit/PayloadServlet.class:SHA3-256:56f7c3d907ec4cea0a0685627fe5be2edc021e5fd13a62d26846bfc41373d0bb
18
- ./data/java/metasploit/PayloadTrustManager.class:SHA3-256:e2d25c8b3e43f584e198e46c2576b367f96275800a96a42fd2dc2c81059a3c41
19
- ./data/java/metasploit/RMILoader.class:SHA3-256:4add539548d76e0142ff5e6ccdba6ee4b21191354be1a40499cb2a745b480bee
20
- ./data/java/metasploit/RMIPayload.class:SHA3-256:0d3e96836a8c3591f4bc827b33c4edb0b4f505a9f17cb0bdb27a367fb71d53c3
21
- ./data/meterpreter/dump_sam.x64.debug.dll:SHA3-256:1b50289c287fe2c873351c32c53b51befcdef5d89d2269d5467a4d81bc7b8bf1
22
- ./data/meterpreter/dump_sam.x64.dll:SHA3-256:7673e1fdde2f8e9b6b959f6732910b57a2ef847f66a773ac1c2021192d57b9bd
23
- ./data/meterpreter/dump_sam.x86.debug.dll:SHA3-256:e7dc554fa30ab83302b2a874b14dad384ca1c2a90c1b29154f6a2b335933e8e4
24
- ./data/meterpreter/dump_sam.x86.dll:SHA3-256:397d84181bfd1adfe718110694f8c97ad392acf8e105761a48fbb92c7c01c370
25
- ./data/meterpreter/elevator.x64.debug.dll:SHA3-256:f14321c1000e03773c11fb45be0c133a0392b712865ea910710812a0854b2574
26
- ./data/meterpreter/elevator.x64.dll:SHA3-256:f8a0f9778087d351440f02cbed6dd5b1342ed2d5f0a3bb7448f7a28fd694a34b
27
- ./data/meterpreter/elevator.x86.debug.dll:SHA3-256:3f96ad4185694eacaeead1019dcba1f998b11fe63a9a8fcb6a2306b3c14bf1b6
28
- ./data/meterpreter/elevator.x86.dll:SHA3-256:1361a53c8fe294276863f57f9fc35ef5caa5a68b65d6cd5c5bcd4d800fed18a8
29
- ./data/meterpreter/ext_server_bofloader.x64.debug.dll:SHA3-256:edad1246bb093ff15e648e8a0f34cfa6962366f3ee3518c360c12062a3a3a120
30
- ./data/meterpreter/ext_server_bofloader.x64.dll:SHA3-256:50cbb8ff069e9472cdd3863be84726aab85993cebe14684d72ddae89dd0de0ea
31
- ./data/meterpreter/ext_server_bofloader.x86.debug.dll:SHA3-256:4911238652687df38bb9d7656f3c1ee907b033bb45f204f2e0c8945db18e082b
32
- ./data/meterpreter/ext_server_bofloader.x86.dll:SHA3-256:ab980948f16007c49c28a2d000ce887cc61b6c64b362b4171dcf662112f1f737
33
- ./data/meterpreter/ext_server_espia.x64.debug.dll:SHA3-256:6c316e5b6b7d995c7b352017224ffc98f270d2eb2033f7a2d93900e1d53f4c2a
34
- ./data/meterpreter/ext_server_espia.x64.dll:SHA3-256:de80aa1fa67d231c8a9e8b801f68f6a66c1ae02c3c8c7c0acdd5c9e03f13886a
35
- ./data/meterpreter/ext_server_espia.x86.debug.dll:SHA3-256:40b23ce3514bd1a0962b495d638628b473233ae2021d7cfffd03766939e68991
36
- ./data/meterpreter/ext_server_espia.x86.dll:SHA3-256:6fb00120c3f04fb1dd7b07fa2d92d01736cd1fe6f2d78cb4c3548e239b2135b4
37
- ./data/meterpreter/ext_server_extapi.x64.debug.dll:SHA3-256:ba7435a5b127ea5c060ef1ef32669d14b141db68c698dedd15824e46c3e7d6fa
38
- ./data/meterpreter/ext_server_extapi.x64.dll:SHA3-256:9796e479bf4391a1061f7f1760a08e6fa06d493590f33590c086d9222a30460c
39
- ./data/meterpreter/ext_server_extapi.x86.debug.dll:SHA3-256:3a196fe8b50a02a52f713b18ba748972a8d3fffd006bc8f3e4efb33096b1c450
40
- ./data/meterpreter/ext_server_extapi.x86.dll:SHA3-256:c670c0ca0570c1e42c33605ade7c7d25017cff6f86f6acdde3369d1ac64962be
41
- ./data/meterpreter/ext_server_incognito.x64.debug.dll:SHA3-256:4904401448a5a48d82f07f81d9518d7757bc1af92df40bbd36c19a4b9adfd540
42
- ./data/meterpreter/ext_server_incognito.x64.dll:SHA3-256:7e960f041d57525789c9b5c3703b20afeca9d7ebb7c07b43c89435d756f091f1
43
- ./data/meterpreter/ext_server_incognito.x86.debug.dll:SHA3-256:d39d047e5d2014af67440fb76a5592631e04fd67d7c49290f427ea10f11fe8e8
44
- ./data/meterpreter/ext_server_incognito.x86.dll:SHA3-256:8140e30a3ca5478956a0a87c99e10910d4ebec64ba5c194ced4ac35aa34d2bd8
45
- ./data/meterpreter/ext_server_kiwi.x64.debug.dll:SHA3-256:ce993f4cc04334e71ae52124b335e09ab0a6405ce56ef6ac2e259ea3c5b2b7f9
46
- ./data/meterpreter/ext_server_kiwi.x64.dll:SHA3-256:b1dc0ee9c7d24375d1f851360749b1d71b751e668ea0754242d9d331f50fb11c
47
- ./data/meterpreter/ext_server_kiwi.x86.debug.dll:SHA3-256:76ac90c1a31116a061e4cfd4e5d181b68f8adf6f02403437a9619f0ff59a0ae4
48
- ./data/meterpreter/ext_server_kiwi.x86.dll:SHA3-256:923ca0a4b808eedd9140e5d148d82f2e3c340288d7a9d1e204ccf3d8e92865ba
49
- ./data/meterpreter/ext_server_lanattacks.x64.debug.dll:SHA3-256:8a88d7c368e99178dc697cff695103ee01447778f891c142b2cba1b760428be8
50
- ./data/meterpreter/ext_server_lanattacks.x64.dll:SHA3-256:2ef84406c557954049ed2a3c98719ebd5ef1b89a083ebca633723da839310116
51
- ./data/meterpreter/ext_server_lanattacks.x86.debug.dll:SHA3-256:cf84a63a407a4c2e59d34c89d5eb43a5be26315b174264682bcea86c354be67b
52
- ./data/meterpreter/ext_server_lanattacks.x86.dll:SHA3-256:3325eb7bb36541b3d2e81c8831415817f422ed556530561aa9eb80606b6d4014
53
- ./data/meterpreter/ext_server_peinjector.x64.debug.dll:SHA3-256:7925a9e4a9bbf3d4114896692811f98c110b308b8657cb25cca1e4cebed90761
54
- ./data/meterpreter/ext_server_peinjector.x64.dll:SHA3-256:9992d49ea92d4884712476eeafdee6015c1f9e72dfbd4bf978e7dc90651227b8
55
- ./data/meterpreter/ext_server_peinjector.x86.debug.dll:SHA3-256:00b0a34ff67d37a127ec5ec1a730fe7d23491033e1ea80b6bab2e8b6c925ae44
56
- ./data/meterpreter/ext_server_peinjector.x86.dll:SHA3-256:7d08b920979a446dc2aa342cc81fd4fc3096bebeb146397a1a7e1ddd4d1e0d7f
57
- ./data/meterpreter/ext_server_powershell.x64.debug.dll:SHA3-256:0204749de3bcd3bfbfaa3a8581f9554f59c4e11633ed957200ea4bf9cb4f63ec
58
- ./data/meterpreter/ext_server_powershell.x64.dll:SHA3-256:97edced1c66c0e05e23d294fdffe988bd90e41af53ad52f12e16b89a831e66e5
59
- ./data/meterpreter/ext_server_powershell.x86.debug.dll:SHA3-256:7455d9c25ec3c0f0423e0613ad81a70fcd3e515170bd6dde3f625998d914f0df
60
- ./data/meterpreter/ext_server_powershell.x86.dll:SHA3-256:56f5aa376f595c5a2724b19aeb33c7f116dbfaa93f97be71569cf3805f5420c4
61
- ./data/meterpreter/ext_server_priv.x64.debug.dll:SHA3-256:2938399e2b3a439596aa369655c1c763ad71709fa949b811a556c0e064c89472
62
- ./data/meterpreter/ext_server_priv.x64.dll:SHA3-256:d8d085b711238e01b8812e61b796380ce9951aebd60a03995a6d53f241fae939
63
- ./data/meterpreter/ext_server_priv.x86.debug.dll:SHA3-256:e8cbd12640f991a293960e10c2815ae2c3e4e069220d4982ec69c8b522522f98
64
- ./data/meterpreter/ext_server_priv.x86.dll:SHA3-256:fed2a5973b56d37ffbca5c9ed5b39765c5198c27a4ca6b60e40c7ed446a773c0
65
- ./data/meterpreter/ext_server_python.x64.debug.dll:SHA3-256:d435396016805ad7576247d763da2666b1c8b4cab56c692eb9b08d245067ab7e
66
- ./data/meterpreter/ext_server_python.x64.dll:SHA3-256:ae7f96bc4424546ad33d145d42a211abab0f2703bf5e2130e924511cf2b27683
67
- ./data/meterpreter/ext_server_python.x86.debug.dll:SHA3-256:9ea21f78bdfd74c4b9c358706aea5f60a27681c87a8f213558d2d629eae45639
68
- ./data/meterpreter/ext_server_python.x86.dll:SHA3-256:1876a7c41d0e6e54890234d94f33ac8b0eec4c6d039a4e180829acef91b0bb24
69
- ./data/meterpreter/ext_server_sniffer.x64.dll:SHA3-256:d0c2310a1819c758735bb147c172a4d6eef208aecfe7da230d92134a1f6069fe
70
- ./data/meterpreter/ext_server_sniffer.x86.dll:SHA3-256:e01a547704ee10a864552d786eb9fcb3fa749bcc89a00a28d531c2a4ed4a23a2
71
- ./data/meterpreter/ext_server_stdapi.jar:SHA3-256:1b0f9989d196b5e01c9bdf8bf2b5f7a6905bd454c2d9cb19be16ab1f23690f89
72
- ./data/meterpreter/ext_server_stdapi.php:SHA3-256:405f79d15b270baa012f1d2875b6d26abdb987401ca0321ca027e8ab0d5ef28d
73
- ./data/meterpreter/ext_server_stdapi.py:SHA3-256:752606a378d2da68d1be8e8c01389f04505c1f2bcce38be43e0deab675794592
74
- ./data/meterpreter/ext_server_stdapi.x64.debug.dll:SHA3-256:522e3c08e047ba338cec960858fbb9f2d870cb340f07169e0a2ac52914f44e1a
75
- ./data/meterpreter/ext_server_stdapi.x64.dll:SHA3-256:cf4a1021e9a08f1551782e40bdbfe392808e90f5342c91c1351c4c22c6f9e7a6
76
- ./data/meterpreter/ext_server_stdapi.x86.debug.dll:SHA3-256:b34986f5faafdc1a6a396658b635aa58511bcfd88cfe2737bb827ee26458217b
77
- ./data/meterpreter/ext_server_stdapi.x86.dll:SHA3-256:44ff32cd9bf1a975e5bdde3f4e50919f0921ef1843bc8a03e97c02b7c86e8271
78
- ./data/meterpreter/ext_server_unhook.x64.debug.dll:SHA3-256:5f86d7c1c26f5020b0c28f93a617444b69b4438938e98b8a7f3af5e9db4dadd4
79
- ./data/meterpreter/ext_server_unhook.x64.dll:SHA3-256:f6f11b2fa8bab705bcd1dde11fab842cc9764e4033cf907328da7b10d823453c
80
- ./data/meterpreter/ext_server_unhook.x86.debug.dll:SHA3-256:de1477c3001b84405e2126e0562c3a6f849916f56e1c57293b1028633857fd66
81
- ./data/meterpreter/ext_server_unhook.x86.dll:SHA3-256:9f9461c65692e409c894f683df23881cf768eb03a2f7050334764734d498dbf2
82
- ./data/meterpreter/ext_server_winpmem.x64.debug.dll:SHA3-256:3550e85b4c360ab8b86f82b8b7ca881ec275604fbec8902d217b73f0f0162c7b
83
- ./data/meterpreter/ext_server_winpmem.x64.dll:SHA3-256:ba12dd560f52a395b35f1ced2f0c574c511f0594dffe011ff8ae9fc6ea19da96
84
- ./data/meterpreter/ext_server_winpmem.x86.debug.dll:SHA3-256:62c18cb8b4607dd429579189e28bd536988a0d36670eaa022a05553d3e153f1d
85
- ./data/meterpreter/ext_server_winpmem.x86.dll:SHA3-256:37dcb722ff83dd7e81a530d904650b09dccfe35bc06d8fc2dc541d4170e187fe
86
- ./data/meterpreter/meterpreter.jar:SHA3-256:f9103d8aaf5053ebe1a52c0fb1e9f3ba5fdcac70bfee1ba95b9681c910e95244
87
- ./data/meterpreter/meterpreter.php:SHA3-256:5de0fa5a38305c9fde9f2617df0a96f669cd7a9bb8b4bba6885a6413eb6779b6
88
- ./data/meterpreter/meterpreter.py:SHA3-256:eb979cb8e4743c33a44731218b9ef9bff02967f0384c828465aa8cfc41f66e15
89
- ./data/meterpreter/metsrv.x64.debug.dll:SHA3-256:3d20b525b167d14795c79b2eea3979ac786e72c082d264f9710e6f3538224bb9
90
- ./data/meterpreter/metsrv.x64.dll:SHA3-256:3077be156a95b6879090be6de3da19799bbe0faf6b677103ecfcaf434fb9ee9d
91
- ./data/meterpreter/metsrv.x86.debug.dll:SHA3-256:b8ba7de8092a878257ba4170c6dea8f6999799188c38ea5336450246e56ce122
92
- ./data/meterpreter/metsrv.x86.dll:SHA3-256:88cb2e4fcd315fd653771a134ab4998182bd6016f55257afe321d7776fb44e35
93
- ./data/meterpreter/screenshot.x64.debug.dll:SHA3-256:484e2e1731fdf3f26ea1549bd3dd67c407a47307126d4536e536f4dd54ac9d67
94
- ./data/meterpreter/screenshot.x64.dll:SHA3-256:8c32d12fc7f29e8dd739cde403a43194c019babe6cd032f2fa2610985d032b04
95
- ./data/meterpreter/screenshot.x86.debug.dll:SHA3-256:7800a03f8fde4f8d9622b9e966f9574a2ef69f95dac5c9695618c387e42b64fa
96
- ./data/meterpreter/screenshot.x86.dll:SHA3-256:f2add9214cfe5900a3143fd01f7e5e91b81e473cdc86cef90411bb9178942a44
1
+ ./data/android/apk/AndroidManifest.xml:SHA3-256:fcb403d3d5b26549c005439fef350556fcf0a20cb42a47a88fdf04197b7dbfcf
2
+ ./data/android/apk/classes.dex:SHA3-256:849d029644c4f8f12c31fc99e8ce7ac8ee0c9c662b23ad7af9b7b5f9e7f2813d
3
+ ./data/android/apk/resources.arsc:SHA3-256:49dabd887dc531fa115bf24f41d781d75bb861cd9ba428c3dc412f2f37904eb8
4
+ ./data/android/meterpreter.dex:SHA3-256:a261df94559b5f3f247ebca2c9f72a533d841c9f7781c73012f4efc223c5b4ce
5
+ ./data/android/meterpreter.jar:SHA3-256:3ef8a63feb2c60de5bf39fdf1c1ed86b2249c2775f40ba35d577f40005abc95e
6
+ ./data/android/metstage.jar:SHA3-256:078e96da70afe731a201e4e2503cd42e1213f9daa6ce87a0698d3b92779ceb09
7
+ ./data/android/shell.jar:SHA3-256:b1bdce2b3e83ec9aa24efa98abdcdce4f9358dc7d5ed97e85c73705448020314
8
+ ./data/java/com/metasploit/meterpreter/JarFileClassLoader.class:SHA3-256:bdae282b49898aca36d20eb9988daf4aa01ea4f9ef8c90670dea8ad7a32bb8af
9
+ ./data/java/javapayload/stage/Meterpreter.class:SHA3-256:6fef1b6098679210652f242413da85ada029f66103bb917feae1a10bb1947c4b
10
+ ./data/java/javapayload/stage/Shell.class:SHA3-256:b69d2e843427ba82a2873eaf2490e7908964d5e532a95f2d8a0d434c26f26e8c
11
+ ./data/java/javapayload/stage/Stage.class:SHA3-256:40ef20fdd3cc39303de2bee29da1e96a897f2c051593b5029e537e9ae9f9bcae
12
+ ./data/java/javapayload/stage/StreamForwarder.class:SHA3-256:583af5855f71ec8c78d1c6b48a1e85e8c1cad98d2f6a36e85a3350f39a4de467
13
+ ./data/java/metasploit/AESEncryption.class:SHA3-256:c65fb61bce03b76d6b3c94bed667e0bb2c044b5cc43ebdde9e3802ec3024a3bc
14
+ ./data/java/metasploit/JMXPayload.class:SHA3-256:a3df34eaaf1138a5130ca9eee636f5eeaa91fd5e2afd3ce5462d1c73d1d0619e
15
+ ./data/java/metasploit/JMXPayloadMBean.class:SHA3-256:b0f51ecafc48c7666d0d30ac0d55ddff4a45e358b9a13ff7a0fb787a3e11c10a
16
+ ./data/java/metasploit/Payload.class:SHA3-256:2ce34ee17367aa0e9bf32c965236cc0f6983400428499480d4cdeeb6c6095e8b
17
+ ./data/java/metasploit/PayloadServlet.class:SHA3-256:abd977f884c12dc9ac1694410c43821e2a130c7472ea12dddd6657bee6c30a20
18
+ ./data/java/metasploit/PayloadTrustManager.class:SHA3-256:989906cd26c6a91fa6c5d4f9c080408c9ad140214e22ab58888c095b5d281637
19
+ ./data/java/metasploit/RMILoader.class:SHA3-256:8976612cf33d494de7a232c78be7507e107227d057802d0ff55f739768c10ea0
20
+ ./data/java/metasploit/RMIPayload.class:SHA3-256:282c7f921c304ec8cc26f86534435d98d027f284b36bda864e15887cf91fd66a
21
+ ./data/meterpreter/dump_sam.x64.debug.dll:SHA3-256:b88b674eb3971093e12b36f07da7817b1e15d398361a29badffee0f2f0624022
22
+ ./data/meterpreter/dump_sam.x64.dll:SHA3-256:c71592bff6c30963a5a73d922f62b8ef7fdcb79ccd9e77db40e87d7c726cb523
23
+ ./data/meterpreter/dump_sam.x86.debug.dll:SHA3-256:cbff2133a357dc266ff7b96e33ebab48422d4961fd350327a0ef438bb6ad4901
24
+ ./data/meterpreter/dump_sam.x86.dll:SHA3-256:f81a25ba91057ed3a114b5f9774d85f5b1d963dfc03b64984b8af6edbd580316
25
+ ./data/meterpreter/elevator.x64.debug.dll:SHA3-256:fb273dd40d12507e40953724059f60a758c8734f118cc2f625d17653fbf39dfe
26
+ ./data/meterpreter/elevator.x64.dll:SHA3-256:15d5a8d50c5f02b92d3b1a5b9fa59fd2c6f2ba3acee942537625b95c965e785c
27
+ ./data/meterpreter/elevator.x86.debug.dll:SHA3-256:1490c523f92bc5e242d08d15e562820ffb04d66e427680e24539d6a600d63472
28
+ ./data/meterpreter/elevator.x86.dll:SHA3-256:4d5d378fb9cd2d1e7ad8651a5cf4066e41c26483834161eb9b98eda76bd085c2
29
+ ./data/meterpreter/ext_server_bofloader.x64.debug.dll:SHA3-256:b98be78381b61e453b41247510c2fdc2f614ca241d5884eaa29f45c7c13f1849
30
+ ./data/meterpreter/ext_server_bofloader.x64.dll:SHA3-256:289d526ac76ff913fe4bcf84b7f7c3002a98f09aadf40c56509e062dd7a78acf
31
+ ./data/meterpreter/ext_server_bofloader.x86.debug.dll:SHA3-256:cecd9fbc8e1d4a2458d9617e3dce9afd432bc9ffdd258661237e0c7b021575dd
32
+ ./data/meterpreter/ext_server_bofloader.x86.dll:SHA3-256:7b9972e884267646621ed27caa432edfbf25ed57f4d6c6b4c61f4c18fdafe280
33
+ ./data/meterpreter/ext_server_espia.x64.debug.dll:SHA3-256:43665d04a170310bc7171cc56ebe520ce7b369a14f32576a30d9ab8d49d59f6c
34
+ ./data/meterpreter/ext_server_espia.x64.dll:SHA3-256:f2c1b75a0f0a519536aa64a8acaf869d9974710e96afc9238b5c57f0efff8b7d
35
+ ./data/meterpreter/ext_server_espia.x86.debug.dll:SHA3-256:67b89e0e64745c6ec11f537ffcf6624e08bfa7eaa405dc966c877fcd6b6ba6c1
36
+ ./data/meterpreter/ext_server_espia.x86.dll:SHA3-256:077e0017b6a837b663eee6e714d094c5f34464af4cece5ccbcafa60807a955c0
37
+ ./data/meterpreter/ext_server_extapi.x64.debug.dll:SHA3-256:a31cae86dc085d52635941e28ce53dc2bf8b8a111c3dc288905a99094d129dda
38
+ ./data/meterpreter/ext_server_extapi.x64.dll:SHA3-256:34137f77c29accd557c04510e62390a76f76f7b1a67c228b3215dcf13781a59d
39
+ ./data/meterpreter/ext_server_extapi.x86.debug.dll:SHA3-256:54f9ac865c81aa6aa260bfd025e0c63fb723289684ba0cc05d13f02d41a889d1
40
+ ./data/meterpreter/ext_server_extapi.x86.dll:SHA3-256:359eb1dac4d6971d85b369da6256acd3334a628f059bf13331c6d42500b1b763
41
+ ./data/meterpreter/ext_server_incognito.x64.debug.dll:SHA3-256:6da8b5119cbdff94618a706d7dcf45a27976e61fd8d6bd7f7e66397d9d3dc9bd
42
+ ./data/meterpreter/ext_server_incognito.x64.dll:SHA3-256:9820d65866054fd167cd2c27d73c7077e6a8d5ed571b02e5948eadf2f28c5268
43
+ ./data/meterpreter/ext_server_incognito.x86.debug.dll:SHA3-256:1785c9d71ff46ce049800911cf39ed43bcdf2633d188e9c36ded59452274cb51
44
+ ./data/meterpreter/ext_server_incognito.x86.dll:SHA3-256:bf89b88c2b3878d3c58f420c7e9bb6091fc84acf3b7aaac90a783ae2d1bb9ad2
45
+ ./data/meterpreter/ext_server_kiwi.x64.debug.dll:SHA3-256:517f294209b0fe49af5eaa30c41f582cbdf24d2bb697ff6982f170e30d0607e8
46
+ ./data/meterpreter/ext_server_kiwi.x64.dll:SHA3-256:7403e4017fc90e731d147194d2ff68608c24451660a7fab16624be792ea02076
47
+ ./data/meterpreter/ext_server_kiwi.x86.debug.dll:SHA3-256:fadd554347ca40291f215e3359e66e047454b478e82ba2daa93ba66132e5c377
48
+ ./data/meterpreter/ext_server_kiwi.x86.dll:SHA3-256:c08b1d65000075966ac1a35cfb0148b6230b98e25aaee71eb06b7c807308c0c2
49
+ ./data/meterpreter/ext_server_lanattacks.x64.debug.dll:SHA3-256:7d764af399cdcbfbf2a6edcf1ecb3035f9091e12a23a11ee0359989d0734aef9
50
+ ./data/meterpreter/ext_server_lanattacks.x64.dll:SHA3-256:24f9f0e50557111545f7b190f211db600878ac8679908fcc88f3ac27158533dd
51
+ ./data/meterpreter/ext_server_lanattacks.x86.debug.dll:SHA3-256:4d1bc7fe41d0def20c49ce0fa1eb7bde68b1b6e0629cdc28123941d4979a706f
52
+ ./data/meterpreter/ext_server_lanattacks.x86.dll:SHA3-256:ce9ea99f726ec08eb45471df37f57b74a8eee9896368aad967bfe999c29e36bd
53
+ ./data/meterpreter/ext_server_peinjector.x64.debug.dll:SHA3-256:78314437d2a2760a39292e040f94aad736df7e88888a448ec2e748111316fc09
54
+ ./data/meterpreter/ext_server_peinjector.x64.dll:SHA3-256:03652c960dbb4f43bdb8b6abc6aa0ea372142b9a4e1236ed39526189c175a8dc
55
+ ./data/meterpreter/ext_server_peinjector.x86.debug.dll:SHA3-256:0aac5aa4829940666ec034bcb18086b32615ba36e3902baa69ab567a86a0714c
56
+ ./data/meterpreter/ext_server_peinjector.x86.dll:SHA3-256:746cbf5e8b2cef080c176ade797c0aa014fcf4342c832ef63f8e2da299134f50
57
+ ./data/meterpreter/ext_server_powershell.x64.debug.dll:SHA3-256:a57eafb229660c270ef6465fa9e925bad51e01f0b514cac0ab68f056b5988df6
58
+ ./data/meterpreter/ext_server_powershell.x64.dll:SHA3-256:b3dfae5945f5f3c972e2331a39128490a710cffe61f06138a154f778ead1cd98
59
+ ./data/meterpreter/ext_server_powershell.x86.debug.dll:SHA3-256:dbd5bb3100101f766d748a4a4ad111144b28360fb1115d89f7f4a5b9f5e7fccf
60
+ ./data/meterpreter/ext_server_powershell.x86.dll:SHA3-256:1dccef6880af7f7cf1477381f26c55fc839a632587df4aa4bda770e1eb2aaa50
61
+ ./data/meterpreter/ext_server_priv.x64.debug.dll:SHA3-256:74e5fe0097a84b747597efeb88cb5c4e2274854a2a80601b6bb4e4036beccf5c
62
+ ./data/meterpreter/ext_server_priv.x64.dll:SHA3-256:301c7cb990918b90ab2138e9d71070975054c41fbd970df1e7a7ceddf6edda78
63
+ ./data/meterpreter/ext_server_priv.x86.debug.dll:SHA3-256:ff0a9b2afa2a8f338d363e400f81b89e77d30073f117a9c9f5d9a47142dd1ca8
64
+ ./data/meterpreter/ext_server_priv.x86.dll:SHA3-256:848d1f477c08e12992f53a946e70e710eca7bc1f3ac9fb69930c62f4cf299efa
65
+ ./data/meterpreter/ext_server_python.x64.debug.dll:SHA3-256:a4fd10b91fddd079668baa6480e086930f399c7bd12a952228069cd89a3b0ba4
66
+ ./data/meterpreter/ext_server_python.x64.dll:SHA3-256:8ed891e0fe7f7398a941011e31a6c5719540eb5f0a7c1b1e9b93e15473e351c0
67
+ ./data/meterpreter/ext_server_python.x86.debug.dll:SHA3-256:15f8f0fa5a7d2137c7be8f8fa379d557bfc05727ffdd8ba2900b13cef2dabc2e
68
+ ./data/meterpreter/ext_server_python.x86.dll:SHA3-256:93b6ab4247b15afa50a94d8e0fa180c9671b5c7e649f90eeac4a9652c4351892
69
+ ./data/meterpreter/ext_server_sniffer.x64.dll:SHA3-256:3e020e533a22ce9e78c268d9f8abd4568f856f7b0811c78f8676ab50f3224910
70
+ ./data/meterpreter/ext_server_sniffer.x86.dll:SHA3-256:821008626a4c6e7871b0437d96d91e1a5e8b982e6d1f6b3af72e555f6ef938c5
71
+ ./data/meterpreter/ext_server_stdapi.jar:SHA3-256:7c8170ba6286ea8166c714f6a83aae764a5ed1fa64709e4263b9636fbcbe746c
72
+ ./data/meterpreter/ext_server_stdapi.php:SHA3-256:ddb98df369a7436140b6c6bd45c959ddda6662fc6351c41815ec06b477955d1e
73
+ ./data/meterpreter/ext_server_stdapi.py:SHA3-256:8f2fec1de2737e8d04454a9e71bf65810964849d051744aca513898ab6521cc7
74
+ ./data/meterpreter/ext_server_stdapi.x64.debug.dll:SHA3-256:7e1593be1f57612499ebac8d395a37300569098ead1b9399daab0cea879997a3
75
+ ./data/meterpreter/ext_server_stdapi.x64.dll:SHA3-256:faf4be7a9fe3af67152feb970773fd660c8eac2e607869de0b0638e6dd2c2801
76
+ ./data/meterpreter/ext_server_stdapi.x86.debug.dll:SHA3-256:3c64f46bbebe70bd35540bf5408df0459d7d90a1c1cb5e1dde5ee82ef19f8bfa
77
+ ./data/meterpreter/ext_server_stdapi.x86.dll:SHA3-256:faf696b9f83e639b4fff321ba96675f702aebec9846ccfee8182a96ca52439e1
78
+ ./data/meterpreter/ext_server_unhook.x64.debug.dll:SHA3-256:78fea9cbe35f4ed9e1d79a457870ef612e99d73bad010eb247eae744b1c4ec0d
79
+ ./data/meterpreter/ext_server_unhook.x64.dll:SHA3-256:76ae8cb416c8551b3048105a202e80917007ea10bdf720358f0054b0fb357938
80
+ ./data/meterpreter/ext_server_unhook.x86.debug.dll:SHA3-256:26a9228542c3e1ad4dba860a5e7bd1a2dc43bc5fca336b719964ee6d65e885b1
81
+ ./data/meterpreter/ext_server_unhook.x86.dll:SHA3-256:643900e9d9765664e8be80ebb2f04785a9e8d227df443a718855ddf6ff7f7996
82
+ ./data/meterpreter/ext_server_winpmem.x64.debug.dll:SHA3-256:a51a49a103ef4589a9361bbbb6013e4daa42917afb3d3ae6f1b589939725440b
83
+ ./data/meterpreter/ext_server_winpmem.x64.dll:SHA3-256:2795d015454067aa0b8ce51f2e05d25c9c83f36d020a4db4a32455555c1661e2
84
+ ./data/meterpreter/ext_server_winpmem.x86.debug.dll:SHA3-256:1fb502f09d5b26d00718853a2ab237ea8172816f38b4fbd62fd0a99c3dfc4f68
85
+ ./data/meterpreter/ext_server_winpmem.x86.dll:SHA3-256:c5af7f478ac4854190a68e237a2830ef6eaa1aa9314f9720516db7690483d059
86
+ ./data/meterpreter/meterpreter.jar:SHA3-256:5f606da3c03a54cb49807e9337c3eb2aab64c01e6477af061db7318990930f11
87
+ ./data/meterpreter/meterpreter.php:SHA3-256:1377f470b77b75caaf8d8d35383315e4b0fca01f89a4da13e229a1c846a76c8a
88
+ ./data/meterpreter/meterpreter.py:SHA3-256:80dd8ca52f8b04352b19f613c2cb266d0ea17c56f8f285520009e0320b899607
89
+ ./data/meterpreter/metsrv.x64.debug.dll:SHA3-256:bbb9406dd916065eede4308a7a8d65a4517ff10a93a6b6e9b90ec77664a36b26
90
+ ./data/meterpreter/metsrv.x64.dll:SHA3-256:dbe06c3f38772644ea5301e487a6e344b06ae001e146abd43d766227c4a6998a
91
+ ./data/meterpreter/metsrv.x86.debug.dll:SHA3-256:f50b3223075c3313865690b76f158274e0666ddccdf2269246afd5885925f4c1
92
+ ./data/meterpreter/metsrv.x86.dll:SHA3-256:5c26499d617b21f9a856a50adcd6c5b98540f0d48fdb91f4991ab15510dd37bf
93
+ ./data/meterpreter/screenshot.x64.debug.dll:SHA3-256:158b74437166c5c49ec1fba9c27d59d1c2366e413b83d32b2bbdf2c0eb6c21cf
94
+ ./data/meterpreter/screenshot.x64.dll:SHA3-256:58b80de1e05a8da405fce5dddcd74f5b6766dc7747df71d1f5b6137433a5d10f
95
+ ./data/meterpreter/screenshot.x86.debug.dll:SHA3-256:d975907d3a76d50869ddd8cba3b6995a6f4930ab76bf5593ce18cb862288400b
96
+ ./data/meterpreter/screenshot.x86.dll:SHA3-256:a69cf5f4bad55f6596458ffb2cd36b0aefa6641e2767056fa4ace3922e6ad69f
97
+ ./data/meterpreter/tests/test_ext_server_stdapi.py:SHA3-256:255a4009703062a47d35fbb61dc293e5499fa759a6bcfa9216ace9736986e96d
data/manifest.uuid CHANGED
@@ -1 +1 @@
1
- c5bde707a441e23e5a09d03d9afcd2af301c243166308be3c93e0511a7d49a66
1
+ 9e572d4f8b7252e918c8a01732400da42f50a0db6c480de57d591163944a13de
@@ -1,22 +1,48 @@
1
- require 'spec_helper'
2
1
  require 'metasploit-payloads'
3
2
 
4
3
  RSpec.describe ::MetasploitPayloads::Crypto do
4
+ let(:plaintext) { "Hello World!".b }
5
+
5
6
  describe '#encrypt' do
6
- let(:encrypted_header) { ::MetasploitPayloads::Crypto::ENCRYPTED_PAYLOAD_HEADER }
7
- let(:plaintext) { "Hello World!".b }
8
- let(:ciphertext) { encrypted_header + "\x89:^r\xC1\xC9\xD9\xA1\xDC\xEB\xBFm".b }
7
+ let(:encrypted_header) { "msf\x02\x01\x01".b }
8
+ let(:ciphertext) { encrypted_header + "F=\xF9\xCB\xF6\xA1\xE4h\x89\x96DD\xC0+\x04\xF1".b }
9
9
 
10
- it 'can encrypt plaintext' do
10
+ it 'encrypts using aes-256-cbc' do
11
11
  expect(described_class.encrypt(plaintext: plaintext)).to eq ciphertext
12
12
  end
13
+ end
13
14
 
14
- it 'can decrypt ciphertext' do
15
- expect(described_class.decrypt(ciphertext: ciphertext)).to eq plaintext
16
- end
15
+ describe '#decrypt' do
16
+ context 'when the ciphertext is' do
17
+ context 'encrypted with chacha20' do
18
+ let(:encrypted_header) { "msf\x01\x01\x01".b }
19
+ let(:ciphertext) { encrypted_header + "\x89:^r\xC1\xC9\xD9\xA1\xDC\xEB\xBFm".b }
20
+
21
+ it 'returns plaintext' do
22
+ expect(described_class.decrypt(ciphertext: ciphertext)).to eq plaintext
23
+ end
24
+ end
25
+
26
+ context 'encrypted with aes-256-cbc' do
27
+ let(:encrypted_header) { "msf\x02\x01\x01".b }
28
+ let(:ciphertext) { encrypted_header + "F=\xF9\xCB\xF6\xA1\xE4h\x89\x96DD\xC0+\x04\xF1".b }
17
29
 
18
- it 'is idempotent' do
19
- expect(described_class.decrypt(ciphertext: described_class.encrypt(plaintext: plaintext))).to eq plaintext
30
+ it 'returns plaintext' do
31
+ expect(described_class.decrypt(ciphertext: ciphertext)).to eq plaintext
32
+ end
33
+ end
34
+
35
+ context 'not encrypted' do
36
+ let(:ciphertext) { plaintext }
37
+
38
+ it 'returns plaintext' do
39
+ expect(described_class.decrypt(ciphertext: ciphertext)).to eq plaintext
40
+ end
41
+ end
20
42
  end
21
43
  end
44
+
45
+ it 'is idempotent' do
46
+ expect(described_class.decrypt(ciphertext: described_class.encrypt(plaintext: plaintext))).to eq plaintext
47
+ end
22
48
  end
@@ -248,10 +248,10 @@ RSpec.describe ::MetasploitPayloads do
248
248
  end
249
249
 
250
250
  describe '#read' do
251
- let(:encrypted_header) { 'encrypted_payload_chacha20_v1' }
251
+ let(:encrypted_header) { "msf\x02\x01\x01" }
252
252
  let(:raw_file) { { name: 'meterpreter.py', contents: 'sample_file_contents' } }
253
- # ChaCha20 encrypted contents
254
- let(:encrypted_contents) { "gg\xB7R\x96\xA00\x84\xC4\xBF5\x1D\xDBG6J\n\x86\x06\xF1" }
253
+ # AES-256-CBC encrypted contents
254
+ let(:encrypted_contents) { "\xEA\x00q\xEB\a\xCA\xD2\xD3\xE2',N\x86\x1C\f?\xBE\xC4\x8AJRks\xAD\xD6\xDF\xA3.\xCD\xA7\x84\xD2".b }
255
255
  let(:encrypted_file) { { name: raw_file[:name], contents: encrypted_header + encrypted_contents } }
256
256
 
257
257
  before :each do
data/spec/spec_helper.rb CHANGED
@@ -1,7 +1,5 @@
1
1
  # frozen_string_literal: true
2
2
 
3
- require 'metasploit_payloads/metasploit_payloads_spec'
4
-
5
3
  # This file was generated by the `rspec --init` command. Conventionally, all
6
4
  # specs live under a `spec` directory, which RSpec adds to the `$LOAD_PATH`.
7
5
  # The generated `.rspec` file contains `--require spec_helper` which will cause
data.tar.gz.sig CHANGED
Binary file
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: metasploit-payloads
3
3
  version: !ruby/object:Gem::Version
4
- version: 2.0.157
4
+ version: 2.0.159
5
5
  platform: ruby
6
6
  authors:
7
7
  - OJ Reeves
@@ -96,7 +96,7 @@ cert_chain:
96
96
  EknWpNgVhohbot1lfVAMmIhdtOVaRVcQQixWPwprDj/ydB8ryDMDosIMcw+fkoXU
97
97
  9GJsSaSRRYQ9UUkVL27b64okU8D48m8=
98
98
  -----END CERTIFICATE-----
99
- date: 2023-10-13 00:00:00.000000000 Z
99
+ date: 2023-10-24 00:00:00.000000000 Z
100
100
  dependencies:
101
101
  - !ruby/object:Gem::Dependency
102
102
  name: rake
@@ -239,6 +239,7 @@ files:
239
239
  - data/meterpreter/screenshot.x64.dll
240
240
  - data/meterpreter/screenshot.x86.debug.dll
241
241
  - data/meterpreter/screenshot.x86.dll
242
+ - data/meterpreter/tests/test_ext_server_stdapi.py
242
243
  - lib/metasploit-payloads.rb
243
244
  - lib/metasploit-payloads/crypto.rb
244
245
  - lib/metasploit-payloads/error.rb
metadata.gz.sig CHANGED
Binary file