From 432661489da05ec83e697ffefdd00624cddb9452 Mon Sep 17 00:00:00 2001 From: Jacob Baines Date: Wed, 30 Oct 2024 10:49:19 -0400 Subject: [PATCH] Bump to 1.30.0 and enable ShellTunnel --- nashorn/cve-2023-22527.go | 1 + nashorn/go.mod | 2 +- reverseshell/cve-2023-22527.go | 1 + reverseshell/go.mod | 2 +- reverseshell/go.sum | 4 ++-- webshell/go.mod | 2 +- webshell/go.sum | 4 ++-- 7 files changed, 9 insertions(+), 7 deletions(-) diff --git a/nashorn/cve-2023-22527.go b/nashorn/cve-2023-22527.go index 1423258..9cdad7f 100644 --- a/nashorn/cve-2023-22527.go +++ b/nashorn/cve-2023-22527.go @@ -152,6 +152,7 @@ func main() { supportedC2 := []c2.Impl{ c2.SSLShellServer, c2.SimpleShellServer, + c2.ShellTunnel, } conf := config.NewRemoteExploit( config.ImplementedFeatures{AssetDetection: true, VersionScanning: true, Exploitation: true}, diff --git a/nashorn/go.mod b/nashorn/go.mod index 58d1bc0..9310c7c 100644 --- a/nashorn/go.mod +++ b/nashorn/go.mod @@ -2,7 +2,7 @@ module github.com/vulncheck-oss/cve-2023-22527/nashorn go 1.23.1 -require github.com/vulncheck-oss/go-exploit v1.29.1 +require github.com/vulncheck-oss/go-exploit v1.30.0 require ( github.com/dustin/go-humanize v1.0.1 // indirect diff --git a/reverseshell/cve-2023-22527.go b/reverseshell/cve-2023-22527.go index e483cf7..c1ea2d6 100644 --- a/reverseshell/cve-2023-22527.go +++ b/reverseshell/cve-2023-22527.go @@ -159,6 +159,7 @@ func (sploit ConfluenceOGNLExploit) RunExploit(conf *config.Config) bool { func main() { supportedC2 := []c2.Impl{ c2.SimpleShellServer, + c2.ShellTunnel, } conf := config.NewRemoteExploit( config.ImplementedFeatures{AssetDetection: true, VersionScanning: true, Exploitation: true}, diff --git a/reverseshell/go.mod b/reverseshell/go.mod index 49bb7c3..df2705f 100644 --- a/reverseshell/go.mod +++ b/reverseshell/go.mod @@ -2,7 +2,7 @@ module github.com/vulncheck-oss/cve-2023-22527/reverseshell go 1.23.1 -require github.com/vulncheck-oss/go-exploit v1.29.1 +require github.com/vulncheck-oss/go-exploit v1.30.0 require ( github.com/dustin/go-humanize v1.0.1 // indirect diff --git a/reverseshell/go.sum b/reverseshell/go.sum index ccd1942..6bc0d64 100644 --- a/reverseshell/go.sum +++ b/reverseshell/go.sum @@ -14,8 +14,8 @@ github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZb github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4= github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec h1:W09IVJc94icq4NjY3clb7Lk8O1qJ8BdBEF8z0ibU0rE= github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec/go.mod h1:qqbHyh8v60DhA7CoWK5oRCqLrMHRGoxYCSS9EjAz6Eo= -github.com/vulncheck-oss/go-exploit v1.29.1 h1:5tTpMJW+zwGO7QZ7SuGpb1KJkT7Kd0O3ETKQMpQkudk= -github.com/vulncheck-oss/go-exploit v1.29.1/go.mod h1:QFpipRVb9o4hTlsvRD1f/IIgaLc9/jelWc3RC9OJwkE= +github.com/vulncheck-oss/go-exploit v1.30.0 h1:9NW5fI7xCorsKLJ8ZVhdq+x8zFbsKMVxIzUTVSATvI8= +github.com/vulncheck-oss/go-exploit v1.30.0/go.mod h1:QFpipRVb9o4hTlsvRD1f/IIgaLc9/jelWc3RC9OJwkE= golang.org/x/mod v0.17.0 h1:zY54UmvipHiNd+pm+m0x9KhZ9hl1/7QNMyxXbc6ICqA= golang.org/x/mod v0.17.0/go.mod h1:hTbmBsO62+eylJbnUtE2MGJUyE7QWk4xUqPFrRgJ+7c= golang.org/x/net v0.30.0 h1:AcW1SDZMkb8IpzCdQUaIq2sP4sZ4zw+55h6ynffypl4= diff --git a/webshell/go.mod b/webshell/go.mod index a9e8897..e59c00a 100644 --- a/webshell/go.mod +++ b/webshell/go.mod @@ -2,7 +2,7 @@ module github.com/vulncheck-oss/cve-2023-22527/webshell go 1.23.1 -require github.com/vulncheck-oss/go-exploit v1.29.1 +require github.com/vulncheck-oss/go-exploit v1.30.0 require ( github.com/dustin/go-humanize v1.0.1 // indirect diff --git a/webshell/go.sum b/webshell/go.sum index ccd1942..6bc0d64 100644 --- a/webshell/go.sum +++ b/webshell/go.sum @@ -14,8 +14,8 @@ github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZb github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4= github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec h1:W09IVJc94icq4NjY3clb7Lk8O1qJ8BdBEF8z0ibU0rE= github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec/go.mod h1:qqbHyh8v60DhA7CoWK5oRCqLrMHRGoxYCSS9EjAz6Eo= -github.com/vulncheck-oss/go-exploit v1.29.1 h1:5tTpMJW+zwGO7QZ7SuGpb1KJkT7Kd0O3ETKQMpQkudk= -github.com/vulncheck-oss/go-exploit v1.29.1/go.mod h1:QFpipRVb9o4hTlsvRD1f/IIgaLc9/jelWc3RC9OJwkE= +github.com/vulncheck-oss/go-exploit v1.30.0 h1:9NW5fI7xCorsKLJ8ZVhdq+x8zFbsKMVxIzUTVSATvI8= +github.com/vulncheck-oss/go-exploit v1.30.0/go.mod h1:QFpipRVb9o4hTlsvRD1f/IIgaLc9/jelWc3RC9OJwkE= golang.org/x/mod v0.17.0 h1:zY54UmvipHiNd+pm+m0x9KhZ9hl1/7QNMyxXbc6ICqA= golang.org/x/mod v0.17.0/go.mod h1:hTbmBsO62+eylJbnUtE2MGJUyE7QWk4xUqPFrRgJ+7c= golang.org/x/net v0.30.0 h1:AcW1SDZMkb8IpzCdQUaIq2sP4sZ4zw+55h6ynffypl4=