diff options
| author | Danilo M. <danix@danix.xyz> | 2026-07-06 14:31:52 +0200 |
|---|---|---|
| committer | Danilo M. <danix@danix.xyz> | 2026-07-06 14:31:52 +0200 |
| commit | 5ca4885d702382182f9c3afb35b2a78cde5d52bd (patch) | |
| tree | e7a3cbe227427e1e5f00a3b74963eb3438198d3b | |
| parent | baac6a99735c552c9d50121c587d175bcc79b952 (diff) | |
| download | slackware-pentesting-suite-5ca4885d702382182f9c3afb35b2a78cde5d52bd.tar.gz slackware-pentesting-suite-5ca4885d702382182f9c3afb35b2a78cde5d52bd.zip | |
metasploit-framework: ship bundled ELF payloads executable
| -rw-r--r-- | metasploit-framework/README | 4 | ||||
| -rw-r--r-- | metasploit-framework/metasploit-framework.SlackBuild | 4 |
2 files changed, 8 insertions, 0 deletions
diff --git a/metasploit-framework/README b/metasploit-framework/README index e223309..fb0a25e 100644 --- a/metasploit-framework/README +++ b/metasploit-framework/README @@ -12,3 +12,7 @@ ahead of the game. This is a repackage of the official nightly build of the debian package by Rapid7 + +Security note: the bundled payload and exploit binaries are shipped +executable, as Metasploit requires. They are delivery artifacts used +against remote targets, not programs meant to be run on the host. diff --git a/metasploit-framework/metasploit-framework.SlackBuild b/metasploit-framework/metasploit-framework.SlackBuild index 2fb4dc3..e2ce921 100644 --- a/metasploit-framework/metasploit-framework.SlackBuild +++ b/metasploit-framework/metasploit-framework.SlackBuild @@ -74,6 +74,10 @@ find -L . \ # create soft link for launcher mkdir -p $PKG/usr/bin +# make bundled payload/exploit ELFs executable (see README) +find $PKG -print0 | xargs -0 file | grep -e "executable" -e "shared object" | grep ELF \ + | cut -f 1 -d : | xargs -r chmod 755 + find $PKG -print0 | xargs -0 file | grep -e "executable" -e "shared object" | grep ELF \ | cut -f 1 -d : | xargs strip --strip-unneeded 2> /dev/null || true |
