adam/metasploit-gs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
364591069cb31510a178fd076f12e243d8429c00
metasploit-gs/modules/exploits
T
History
zomfg-zombie 364591069c Fix payload failing to trigger 
For whatever reason,  `;for #{rand_text_alpha(1)} in #{iter};do read;done;sh;exit 0;` causes an issue with the payload triggering.

Editing `do read` to `do read r`, as taken from the PoC script at https://www.exploit-db.com/exploits/48051, causes the `MAIL_FROM` field to exceed 64 characters.

However, this seems to make 0 difference to the payload, so I commented out the length check.

Reliably working on OpenSMTPd 6.6.0 on an Ubuntu 20.04 host.
2021-01-19 18:31:35 +10:00
..
aix
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
android
Use zeitwerk for lib/msf/core folder
2020-12-07 10:31:45 +00:00
apple_ios
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
bsd/finger
Refactor modules that use Expect
2020-02-05 21:16:21 -06:00
bsdi/softcart
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
dialup/multi/login
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
firefox/local
Use zeitwerk for lib/msf/core folder
2020-12-07 10:31:45 +00:00
freebsd
Add an SNMPPORT options
2020-12-16 15:15:27 +01:00
hpux/lpd
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
irix/lpd
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
linux
Land #14368, Pulse Connect Secure gzip RCE: cve-2020-8260
2020-12-17 17:43:55 -05:00
mainframe/ftp
Use zeitwerk for lib/msf/core folder
2020-12-07 10:31:45 +00:00
multi
spelling
2021-01-09 08:13:19 -05:00
netware
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
openbsd/local
Add Msf::Post::Unix.is_root? method
2020-07-12 00:47:56 +00:00
osx
Use zeitwerk for lib/msf/core folder
2020-12-07 10:31:45 +00:00
qnx
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
solaris
Clarify sending username where password expected
2020-12-07 01:55:18 -06:00
unix
Fix payload failing to trigger
2021-01-19 18:31:35 +10:00
windows
Land #14414, CVE-2020-1337 - patch bypass for CVE-2020-1048
2021-01-15 19:13:14 +01:00
example_linux_priv_esc.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
example_webapp.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00
example.rb
Convert disclosure dates to iso8601
2020-10-02 21:00:37 +01:00