metasploit-payloads 2.0.147 → 2.0.148

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 81cfde1ea52fcda95eb78fcf78f124e872577e58957110c41e0650a662d230ec
-  data.tar.gz: 976224c2571cef9fec88b0aa77519f857287688e790ff835c029eafde6ce3121
+  metadata.gz: 20851bb98a3cde9efa3f4034f8dc91aea78227c0a2045184ca2aa220a4f83299
+  data.tar.gz: de392b84384a87cad25930a1e8b2d4d29c87847a1194753a58f6756eacb5e12b
 SHA512:
-  metadata.gz: f94ce694e81a6d5655da61956ed39cbd1a40dc9461c13a7c1780a944034e5dbf01986b81b05c741650dc94cf0b59788d9ae7d5b1ee87ec7883358cf85e295f31
-  data.tar.gz: 6c0508bf78c348d8214cb9094dad6b9d41e23c403c72eb3d44e1e38cdb87e2f825b8f2c22e0dfc0ba3b0db6222d5e8b113c9869873c3c75db34d5fe657bcea3b
+  metadata.gz: f18f1787b6b38a0f87c565640200151ebf05ffdfb46f84eeddc8abae8b52c3d6e34f2872bf5cbcb8e3a00c775507b281a17e485cfe8732c4e6633316f60bd051
+  data.tar.gz: 2fabc289a77db3f729b3abc4c5cd0033ddf460b1964e2c17320957a3a01124f61f2e08852ecccc1c5f2938e45a06df9ebab37f11bd1e857290ab502999538782

checksums.yaml.gz.sig

@@ -1,3 +1,2 @@
-����'Q��˓�q�&�������5�{�y��if���5
�~�)@��8��)U��e�����ZD��"������LJ@|�9c�ҭοQ�%�.��rjJ�2Y��#��j�a�̛rtU=����
-��„�oUOay�����q�s=���ց�ь��#�*ѓ�bm�)��4����҈�
-���?����tˊ�3��لۼuVݰxֲ1�o���+�ݣ��h#����
+K9��/�yl�z>��<���U!�}���(D�g8w���^E���	䁼r<�<��}�%)&1�] �h��"�$"��=�#����rﺡ����
��d�=7����k�V��]#�\xt�:�������f�
+I?"J1��h���;�ͅo�&�-�.�t&

data/data/meterpreter/ext_server_stdapi.php

@@ -21,7 +21,7 @@ define("TLV_TYPE_FILE_MODE",           TLV_META_TYPE_STRING  | 1203);
 define("TLV_TYPE_FILE_SIZE",           TLV_META_TYPE_UINT    | 1204);
 define("TLV_TYPE_FILE_HASH",           TLV_META_TYPE_RAW     | 1206);
 
-define("TLV_TYPE_STAT_BUF32",          TLV_META_TYPE_COMPLEX | 1220);
+define("TLV_TYPE_STAT_BUF",            TLV_META_TYPE_COMPLEX | 1221);
 
 define("TLV_TYPE_SEARCH_RECURSE",      TLV_META_TYPE_BOOL    | 1230);
 define("TLV_TYPE_SEARCH_GLOB",         TLV_META_TYPE_STRING  | 1231);
@@ -429,25 +429,40 @@ function add_stat_buf($path) {
     if ($st) {
         $st_buf = "";
         $st_buf .= pack("V", $st['dev']);
-        $st_buf .= pack("v", $st['ino']);
-        $st_buf .= pack("v", $st['mode']);
-        $st_buf .= pack("v", 0);
-        $st_buf .= pack("v", $st['nlink']);
-        $st_buf .= pack("v", $st['uid']);
-        $st_buf .= pack("v", $st['gid']);
+        $st_buf .= pack("V", $st['mode']);
+        $st_buf .= pack("V", $st['nlink']);
+        $st_buf .= pack("V", $st['uid']);
+        $st_buf .= pack("V", $st['gid']);
         $st_buf .= pack("V", $st['rdev']);
-        $st_buf .= pack("V", $st['size']);
-        $st_buf .= pack("V", $st['ctime']);
-        $st_buf .= pack("V", $st['atime']);
-        $st_buf .= pack("V", $st['mtime']);
+
+        $st_buf .= pack_p($st['ino']);
+        $st_buf .= pack_p($st['size']);
+        $st_buf .= pack_p($st['atime']);
+        $st_buf .= pack_p($st['mtime']);
+        $st_buf .= pack_p($st['ctime']);
+        
         $st_buf .= pack("V", $st['blksize']);
         $st_buf .= pack("V", $st['blocks']);
-        return create_tlv(TLV_TYPE_STAT_BUF32, $st_buf);
+       
+        return create_tlv(TLV_TYPE_STAT_BUF, $st_buf);
     }
     return false;
 }
 }
 
+if(!function_exists('pack_p')) {
+# Implements pack('P', $value) - but backwards compatible to PHP4.x
+# https://www.php.net/manual/en/function.pack.php
+# Directive:
+#   P   unsigned long long (always 64 bit, little endian byte order)
+function pack_p($value) {
+    $first_half = pack('V', $value & 0xffffffff);
+    $second_half = pack('V', ($value >> 32) & 0xffffffff);
+
+    return $first_half . $second_half;
+}
+}
+
 if (!function_exists('resolve_host')) {
 function resolve_host($hostname, $family) {
     /* requires PHP >= 5 */
@@ -655,7 +670,7 @@ function stdapi_fs_ls($req, &$pkt) {
                 packet_add_tlv($pkt, create_tlv(TLV_TYPE_FILE_PATH, $path . DIRECTORY_SEPARATOR . $file));
                 $st_buf = add_stat_buf($path . DIRECTORY_SEPARATOR . $file);
                 if (!$st_buf) {
-                    $st_buf = create_tlv(TLV_TYPE_STAT_BUF32, '');
+                    $st_buf = create_tlv(TLV_TYPE_STAT_BUF, '');
                 }
                 packet_add_tlv($pkt, $st_buf);
             }

data/lib/metasploit-payloads/version.rb

@@ -1,6 +1,6 @@
 # -*- coding:binary -*-
 module MetasploitPayloads
-  VERSION = '2.0.147'
+  VERSION = '2.0.148'
 
   def self.version
     VERSION

data.tar.gz.sig

@@ -1 +1 @@
-���F�ee��\��3���a�)GG+<��
+rs(�s�%BC����돥Չ��,�-5��q�'��
Ƶ�U���R����؋�;ŌD��,K�1��^�=�$t�D��=�u`��Dp7Y��Jr�,�&�7�����~*�D�
�ʴT�F��
�6���`��X��� vqOS�ºpU�i�4�.	�(�ߒz Ji*�e�l�%e��%��錋00^��2<��!��R�g*'34��$[5�Hf����ܸ>M]qy����}DX��}eg��g��

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: metasploit-payloads
 version: !ruby/object:Gem::Version
-  version: 2.0.147
+  version: 2.0.148
 platform: ruby
 authors:
 - OJ Reeves
@@ -96,7 +96,7 @@ cert_chain:
   EknWpNgVhohbot1lfVAMmIhdtOVaRVcQQixWPwprDj/ydB8ryDMDosIMcw+fkoXU
   9GJsSaSRRYQ9UUkVL27b64okU8D48m8=
   -----END CERTIFICATE-----
-date: 2023-06-28 00:00:00.000000000 Z
+date: 2023-06-30 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rake