Skip to content

Commit 65e27ff

Browse files
committed
Warn about the potential to jack up /etc/passwd
This needs to be underlined. It's too easy to wang up /etc/passwd by accident. This closes PR rapid7#632 [Fixes #38593685]
1 parent 5e80e19 commit 65e27ff

File tree

1 file changed

+3
-1
lines changed

1 file changed

+3
-1
lines changed

modules/post/multi/escalate/metasploit_pcaplog.rb

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,9 @@ def initialize(info={})
3333
3434
Successful exploitation results in the creation of a new superuser account.
3535
36-
This module requires manual clean-up - remove /tmp/msf3-session*pcap files and truncate /etc/passwd.
36+
This module requires manual clean-up. Upon success, you should remove /tmp/msf3-session*pcap
37+
files and truncate /etc/passwd. Note that if this module fails, you can potentially induce
38+
a permanent DoS on the target by corrupting the /etc/passwd file.
3739
},
3840
'License' => MSF_LICENSE,
3941
'Author' => [ '0a29406d9794e4f9b30b3c5d6702c708'],

0 commit comments

Comments
 (0)