Skip to content

Comments

A survey of module options to identify modules with specific requirements#1

Open
cgranleese-r7 wants to merge 9 commits intoadfoster-r7:masterfrom
cgranleese-r7:module-survey
Open

A survey of module options to identify modules with specific requirements#1
cgranleese-r7 wants to merge 9 commits intoadfoster-r7:masterfrom
cgranleese-r7:module-survey

Conversation

@cgranleese-r7
Copy link
Collaborator

@cgranleese-r7 cgranleese-r7 commented Feb 18, 2021

This PR adds a script that will generate two markdown files.

module_survey_script.rb is the script used to generate module_list_session_required.md and module_list_no_session_required.md.

The result have been broken down into two files, one for remote modules, another for local modules. These tables will list modules which only require target, port, credentials, or URL paths.

The markdown file is also included in the PR so we have a rendered version on hand.

@cgranleese-r7 cgranleese-r7 force-pushed the module-survey branch 6 times, most recently from 6523e95 to a93da4c Compare February 25, 2021 18:19
@jmartin-tech
Copy link

I think this is missing a key requirement check. Each module should also be checked to ensure no other options are required without a provided default.

Just a spot check finds exploit/linux/http/pulse_secure_cmd_exec has a required SID option that has no default provided.

@cgranleese-r7
Copy link
Collaborator Author

I think this is missing a key requirement check. Each module should also be checked to ensure no other options are required without a provided default.

Just a spot check finds exploit/linux/http/pulse_secure_cmd_exec has a required SID option that has no default provided.

@jmartin-r7, got those changes added in.

It now also splits the data between two files, one for modules requiring sessions, another for modules that do not require sessions.

Current results breakdown:

Session Required:
Auxiliary - 0
Exploit - 0
Evasion - 0

No session required:
Auxiliary - 16
Exploit - 580
Evasion - 7
Total: 603

Let me know if anything else needs done/changed. Thanks 👍

@cgranleese-r7 cgranleese-r7 force-pushed the module-survey branch 3 times, most recently from a893b30 to 7c6d53e Compare March 16, 2021 17:48
@adfoster-r7 adfoster-r7 force-pushed the master branch 2 times, most recently from 9d335fc to d9823d6 Compare March 18, 2021 14:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants