Ensure IP addresses are explicitly converted to strings

MSP-12113

Author: mbuck-r7

lib/msf/core/auxiliary/report.rb

@@ -205,7 +205,7 @@ def report_auth_info(opts={})
       port         = opts[:service].port
       proto        = opts[:service].proto
       service_name = opts[:service].name
-      host         = opts[:service].host.address
+      host         = opts[:service].host.address.to_s
     else
       port         = opts.fetch(:port)
       service_name = opts.fetch(:sname, nil)

lib/msf/core/db_export.rb

@@ -482,7 +482,7 @@ def extract_web_site_info(report_file)
       end
 
       site = e
-      el = create_xml_element("host", site.service.host.address)
+      el = create_xml_element("host", site.service.host.address.to_s)
       report_file.write("      #{el}\n")
 
       el = create_xml_element("port", site.service.port)
@@ -509,7 +509,7 @@ def extract_web_info(report_file, tag, entries)
       el = create_xml_element("vhost", site.vhost)
       report_file.write("      #{el}\n")
 
-      el = create_xml_element("host", site.service.host.address)
+      el = create_xml_element("host", site.service.host.address.to_s)
       report_file.write("      #{el}\n")
 
       el = create_xml_element("port", site.service.port)

lib/msf/core/db_manager/service.rb

@@ -65,13 +65,13 @@ def report_service(opts)
 
     if addr.kind_of? ::Mdm::Host
       host = addr
-      addr = host.address
+      addr = host.address.to_s
     else
       host = report_host(hopts)
     end
 
     if opts[:port].to_i.zero?
-      dlog("Skipping port zero for service '%s' on host '%s'" % [opts[:name],host.address])
+      dlog("Skipping port zero for service '%s' on host '%s'" % [opts[:name],host.address.to_s])
       return nil
     end
 

lib/msf/core/db_manager/session.rb

@@ -137,7 +137,7 @@ def report_session(opts)
 
     s = ::Mdm::Session.new(sess_data)
     s.save!
-        
+
     if session and session.exploit_task and session.exploit_task.record
       session_task =  session.exploit_task.record
       if session_task.class == Mdm::Task
@@ -163,7 +163,7 @@ def report_session(opts)
       end
 
       vuln_info = {
-        :host => host.address,
+        :host => host.address.to_s,
         :name => mod_name,
         :refs => mod.references,
         :workspace => wspace,

lib/msf/core/db_manager/web.rb

@@ -242,7 +242,7 @@ def report_web_site(opts)
     host.save!
 =end
 
-    vhost ||= host.address
+    vhost ||= host.address.to_s
     site = ::Mdm::WebSite.where(vhost: vhost, service_id: serv[:id]).first_or_initialize
     site.options = opts[:options] if opts[:options]
 

lib/msf/core/rpc/v10/rpc_db.rb

@@ -128,7 +128,7 @@ def rpc_create_credential(xopts)
       opts[:last_attempted_at] = opts[:last_attempted_at].to_datetime
       login = create_credential_login(opts)
 
-      ret[:host]   = login.service.host.address,
+      ret[:host]   = login.service.host.address.to_s,
       ret[:sname]  = login.service.name
       ret[:status] = login.status
     end
@@ -228,7 +228,7 @@ def rpc_services( xopts)
     wspace.services.includes(:host).where(conditions).offset(offset).limit(limit).each do |s|
       service = {}
       host = s.host
-      service[:host] = host.address || "unknown"
+      service[:host] = host.address.to_s || "unknown"
       service[:created_at] = s[:created_at].to_i
       service[:updated_at] = s[:updated_at].to_i
       service[:port] = s[:port]
@@ -267,7 +267,7 @@ def rpc_vulns(xopts)
         vuln[:proto] = nil
       end
       vuln[:time] = v.created_at.to_i
-      vuln[:host] = v.host.address || nil
+      vuln[:host] = v.host.address.to_s || nil
       vuln[:name] = v.name
       vuln[:refs] = reflist.join(',')
       ret[:vulns] << vuln
@@ -433,7 +433,7 @@ def rpc_get_service(xopts)
     services.each do |s|
       service = {}
       host = s.host
-      service[:host] = host.address || "unknown"
+      service[:host] = host.address.to_s || "unknown"
       service[:created_at] = s[:created_at].to_i
       service[:updated_at] = s[:updated_at].to_i
       service[:port] = s[:port]
@@ -482,7 +482,7 @@ def rpc_get_note(xopts)
     notes.each do |n|
       note = {}
       host = n.host
-      note[:host] = host.address || "unknown"
+      note[:host] = host.address.to_s || "unknown"
       if n.service
         note[:port] = n.service.port
         note[:proto] = n.service.proto
@@ -508,7 +508,7 @@ def rpc_get_client(xopts)
     if(c)
       client = {}
       host = c.host
-      client[:host] = host.address
+      client[:host] = host.address.to_s
       client[:created_at] = c.created_at.to_i
       client[:updated_at] = c.updated_at.to_i
       client[:ua_string] = c.ua_string.to_s
@@ -567,7 +567,7 @@ def rpc_notes(xopts)
       note[:time] = n.created_at.to_i
       note[:host] = ""
       note[:service] = ""
-      note[:host] = n.host.address if(n.host)
+      note[:host] = n.host.address.to_s if(n.host)
       note[:service] = n.service.name || n.service.port  if(n.service)
       note[:type ] = n.ntype.to_s
       note[:data] = n.data.inspect
@@ -828,7 +828,7 @@ def rpc_events(xopts)
 
     wspace.events.offset(offset).limit(limit).each do |e|
       event = {}
-      event[:host] = e.host.address if(e.host)
+      event[:host] = e.host.address.to_s if(e.host)
       event[:created_at] = e.created_at.to_i
       event[:updated_at] = e.updated_at.to_i
       event[:name] = e.name
@@ -873,7 +873,7 @@ def rpc_loots(xopts)
     ret[:loots] = []
     wspace.loots.offset(offset).limit(limit).each do |l|
       loot = {}
-      loot[:host] = l.host.address if(l.host)
+      loot[:host] = l.host.address.to_s if(l.host)
       loot[:service] = l.service.name || l.service.port  if(l.service)
       loot[:ltype] = l.ltype
       loot[:ctype] = l.content_type
@@ -928,7 +928,7 @@ def rpc_get_vuln(xopts)
     vulns.each do |v|
       vuln= {}
       host= v.host
-      vuln[:host] = host.address || "unknown"
+      vuln[:host] = host.address.to_s || "unknown"
       if v.service
         vuln[:port] = v.service.port
         vuln[:proto] = v.service.proto

lib/msf/ui/console/command_dispatcher/core.rb

@@ -806,7 +806,7 @@ def cmd_rename_job(*args)
     end
 
     # This is not respecting the Protected access control, but this seems to be the only way
-    # to rename a job. If you know a more appropriate way, patches accepted. 
+    # to rename a job. If you know a more appropriate way, patches accepted.
     framework.jobs[job_id].send(:name=, job_name)
     print_status("Job #{job_id} updated")
 
@@ -3108,7 +3108,7 @@ def option_values_target_addrs
       hosts = {}
       framework.db.each_service(framework.db.workspace) do |service|
         if (service.port == mport)
-          hosts[ service.host.address ] = true
+          hosts[ service.host.address.to_s ] = true
         end
       end
 
@@ -3119,7 +3119,7 @@ def option_values_target_addrs
     # List all hosts in the database
     else
       framework.db.each_host(framework.db.workspace) do |host|
-        res << host.address
+        res << host.address.to_s
       end
     end
 

lib/msf/ui/console/command_dispatcher/db.rb

@@ -301,7 +301,7 @@ def cmd_hosts(*args)
       host_ranges.each do |range|
         range.each do |address|
           host = framework.db.find_or_create_host(:host => address)
-          print_status("Time: #{host.created_at} Host: host=#{host.address}")
+          print_status("Time: #{host.created_at} Host: host=#{host.address.to_s}")
         end
       end
       return
@@ -338,7 +338,7 @@ def cmd_hosts(*args)
 
         tbl << columns
         if set_rhosts
-          addr = (host.scope ? host.address + '%' + host.scope : host.address )
+          addr = (host.scope ? host.address.to_s + '%' + host.scope : host.address.to_s )
           rhosts << addr
         end
         if mode == :delete
@@ -489,7 +489,7 @@ def cmd_services(*args)
           info[:name]  = names.first.downcase if names and names.first
 
           svc = framework.db.find_or_create_service(info)
-          print_status("Time: #{svc.created_at} Service: host=#{svc.host.address} port=#{svc.port} proto=#{svc.proto} name=#{svc.name}")
+          print_status("Time: #{svc.created_at} Service: host=#{svc.host.address.to_s} port=#{svc.port} proto=#{svc.proto} name=#{svc.name}")
         end
       end
       return
@@ -520,10 +520,10 @@ def cmd_services(*args)
           )
         end
 
-        columns = [host.address] + col_names.map { |n| service[n].to_s || "" }
+        columns = [host.address.to_s] + col_names.map { |n| service[n].to_s || "" }
         tbl << columns
         if set_rhosts
-          addr = (host.scope ? host.address + '%' + host.scope : host.address )
+          addr = (host.scope ? host.address.to_s + '%' + host.scope : host.address.to_s )
           rhosts << addr
         end
 
@@ -638,12 +638,12 @@ def cmd_vulns(*args)
             next unless ports.empty? or ports.include? vuln.service.port
             # Same for service names
             next unless svcs.empty? or svcs.include?(vuln.service.name)
-            print_status("Time: #{vuln.created_at} Vuln: host=#{host.address} name=#{vuln.name} refs=#{reflist.join(',')} #{(show_info && vuln.info) ? "info=#{vuln.info}" : ""}")
+            print_status("Time: #{vuln.created_at} Vuln: host=#{host.address.to_s} name=#{vuln.name} refs=#{reflist.join(',')} #{(show_info && vuln.info) ? "info=#{vuln.info}" : ""}")
 
           else
             # This vuln has no service, so it can't match
             next unless ports.empty? and svcs.empty?
-            print_status("Time: #{vuln.created_at} Vuln: host=#{host.address} name=#{vuln.name} refs=#{reflist.join(',')} #{(show_info && vuln.info) ? "info=#{vuln.info}" : ""}")
+            print_status("Time: #{vuln.created_at} Vuln: host=#{host.address.to_s} name=#{vuln.name} refs=#{reflist.join(',')} #{(show_info && vuln.info) ? "info=#{vuln.info}" : ""}")
           end
         end
       end
@@ -920,11 +920,11 @@ def creds_search(*args)
             # the user-supplied RangeWalker, then we don't have any reason to
             # print it out. However, we treat the absence of ranges as meaning
             # all hosts.
-            if host_ranges.present? && !host_ranges.any? { |range| range.include?(login.service.host.address) }
+            if host_ranges.present? && !host_ranges.any? { |range| range.include?(login.service.host.address.to_s) }
               next
             end
-            row = [ login.service.host.address ]
-            rhosts << login.service.host.address
+            row = [ login.service.host.address.to_s ]
+            rhosts << login.service.host.address.to_s
             if login.service.name.present?
               row << "#{login.service.port}/#{login.service.proto} (#{login.service.name})"
             else
@@ -1089,7 +1089,7 @@ def cmd_notes(*args)
           break if not host
           note = framework.db.find_or_create_note(:host => host, :type => type, :data => data)
           break if not note
-          print_status("Time: #{note.created_at} Note: host=#{host.address} type=#{note.ntype} data=#{note.data}")
+          print_status("Time: #{note.created_at} Note: host=#{host.address.to_s} type=#{note.ntype} data=#{note.data}")
         }
       }
       return
@@ -1156,9 +1156,9 @@ def cmd_notes(*args)
       msg = "Time: #{note.created_at} Note:"
       if (note.host)
         host = note.host
-        msg << " host=#{note.host.address}"
+        msg << " host=#{note.host.address.to_s}"
         if set_rhosts
-          addr = (host.scope ? host.address + '%' + host.scope : host.address )
+          addr = (host.scope ? host.address.to_s + '%' + host.scope : host.address.to_s )
           rhosts << addr
         end
       end
@@ -1314,7 +1314,7 @@ def cmd_loot(*args)
           )
           end
           row = []
-          row.push( (loot.host ? loot.host.address : "") )
+          row.push( (loot.host ? loot.host.address.to_s : "") )
           if (loot.service)
             svc = (loot.service.name ? loot.service.name : "#{loot.service.port}/#{loot.service.proto}")
             row.push svc

lib/rex/parser/burp_session_nokogiri.rb

@@ -155,7 +155,7 @@ def report_web_host_info
       return unless @state[:uri].kind_of? URI::HTTP
       return unless @state[:web_site].service.host.name.to_s.empty?
       host_info = {:workspace => @args[:wspace]}
-      host_info[:address] = @state[:web_site].service.host.address
+      host_info[:address] = @state[:web_site].service.host.address.to_s
       host_info[:name] = @state[:uri].host
       report_db(:host, host_info)
     end

modules/auxiliary/analyze/jtr_oracle_fast.rb

@@ -51,7 +51,7 @@ def crack(format)
           print_error("Unable to read #{myloot.path} \n #{e}")
         end
         oracle_array.each do |row|
-          hashlist.write("#{row[0]}:#{row[1]}:#{myloot.host.address}:#{myloot.service.port}\n")
+          hashlist.write("#{row[0]}:#{row[1]}:#{myloot.host.address.to_s}:#{myloot.service.port}\n")
         end
       end
       hashlist.close