From 5ca4885d702382182f9c3afb35b2a78cde5d52bd Mon Sep 17 00:00:00 2001 From: "Danilo M." Date: Mon, 6 Jul 2026 14:31:52 +0200 Subject: metasploit-framework: ship bundled ELF payloads executable --- metasploit-framework/README | 4 ++++ metasploit-framework/metasploit-framework.SlackBuild | 4 ++++ 2 files changed, 8 insertions(+) diff --git a/metasploit-framework/README b/metasploit-framework/README index e223309..fb0a25e 100644 --- a/metasploit-framework/README +++ b/metasploit-framework/README @@ -12,3 +12,7 @@ ahead of the game. This is a repackage of the official nightly build of the debian package by Rapid7 + +Security note: the bundled payload and exploit binaries are shipped +executable, as Metasploit requires. They are delivery artifacts used +against remote targets, not programs meant to be run on the host. diff --git a/metasploit-framework/metasploit-framework.SlackBuild b/metasploit-framework/metasploit-framework.SlackBuild index 2fb4dc3..e2ce921 100644 --- a/metasploit-framework/metasploit-framework.SlackBuild +++ b/metasploit-framework/metasploit-framework.SlackBuild @@ -74,6 +74,10 @@ find -L . \ # create soft link for launcher mkdir -p $PKG/usr/bin +# make bundled payload/exploit ELFs executable (see README) +find $PKG -print0 | xargs -0 file | grep -e "executable" -e "shared object" | grep ELF \ + | cut -f 1 -d : | xargs -r chmod 755 + find $PKG -print0 | xargs -0 file | grep -e "executable" -e "shared object" | grep ELF \ | cut -f 1 -d : | xargs strip --strip-unneeded 2> /dev/null || true -- cgit v1.2.3