Skip to content

Commit 3b2a0be

Browse files
committed
First swing at osx x64 meterpreter support
1 parent e896576 commit 3b2a0be

File tree

1 file changed

+10
-3
lines changed

1 file changed

+10
-3
lines changed

modules/exploits/multi/ssh/sshexec.rb

Lines changed: 10 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -35,11 +35,12 @@ def initialize
3535
},
3636
'Payload' =>
3737
{
38-
'Space' => 4096,
38+
'Space' => 800000,
3939
'BadChars' => "",
4040
'DisableNops' => true
4141
},
4242
'Platform' => %w{ linux osx python },
43+
'CmdStagerFlavor' => %w{ bourne echo printf curl wget },
4344
'Targets' =>
4445
[
4546
[ 'Linux x86',
@@ -60,14 +61,20 @@ def initialize
6061
'Platform' => 'osx'
6162
}
6263
],
64+
[ 'OSX x64',
65+
{
66+
'Arch' => ARCH_X64,
67+
'Platform' => 'osx',
68+
'CmdStagerFlavor' => %w{curl wget}
69+
}
70+
],
6371
[ 'Python',
6472
{
6573
'Arch' => ARCH_PYTHON,
6674
'Platform' => 'python'
6775
}
6876
]
6977
],
70-
'CmdStagerFlavor' => %w{ bourne echo printf },
7178
'DefaultTarget' => 0,
7279
# For the CVE
7380
'DisclosureDate' => 'Jan 01 1999'
@@ -77,7 +84,7 @@ def initialize
7784
[
7885
OptString.new('USERNAME', [ true, "The user to authenticate as.", 'root' ]),
7986
OptString.new('PASSWORD', [ true, "The password to authenticate with.", '' ]),
80-
OptString.new('RHOST', [ true, "The target address" ]),
87+
Opt::RHOST('RHOST', [ true, "The target address" ]),
8188
Opt::RPORT(22)
8289
], self.class
8390
)

0 commit comments

Comments
 (0)