aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorDanilo M. <danix@danix.xyz>2026-07-06 14:31:52 +0200
committerDanilo M. <danix@danix.xyz>2026-07-06 14:31:52 +0200
commit5ca4885d702382182f9c3afb35b2a78cde5d52bd (patch)
treee7a3cbe227427e1e5f00a3b74963eb3438198d3b
parentbaac6a99735c552c9d50121c587d175bcc79b952 (diff)
downloadslackware-pentesting-suite-5ca4885d702382182f9c3afb35b2a78cde5d52bd.tar.gz
slackware-pentesting-suite-5ca4885d702382182f9c3afb35b2a78cde5d52bd.zip
metasploit-framework: ship bundled ELF payloads executable
-rw-r--r--metasploit-framework/README4
-rw-r--r--metasploit-framework/metasploit-framework.SlackBuild4
2 files changed, 8 insertions, 0 deletions
diff --git a/metasploit-framework/README b/metasploit-framework/README
index e223309..fb0a25e 100644
--- a/metasploit-framework/README
+++ b/metasploit-framework/README
@@ -12,3 +12,7 @@ ahead of the game.
This is a repackage of the official nightly build of the debian
package by Rapid7
+
+Security note: the bundled payload and exploit binaries are shipped
+executable, as Metasploit requires. They are delivery artifacts used
+against remote targets, not programs meant to be run on the host.
diff --git a/metasploit-framework/metasploit-framework.SlackBuild b/metasploit-framework/metasploit-framework.SlackBuild
index 2fb4dc3..e2ce921 100644
--- a/metasploit-framework/metasploit-framework.SlackBuild
+++ b/metasploit-framework/metasploit-framework.SlackBuild
@@ -74,6 +74,10 @@ find -L . \
# create soft link for launcher
mkdir -p $PKG/usr/bin
+# make bundled payload/exploit ELFs executable (see README)
+find $PKG -print0 | xargs -0 file | grep -e "executable" -e "shared object" | grep ELF \
+ | cut -f 1 -d : | xargs -r chmod 755
+
find $PKG -print0 | xargs -0 file | grep -e "executable" -e "shared object" | grep ELF \
| cut -f 1 -d : | xargs strip --strip-unneeded 2> /dev/null || true