metasploit: 6.4.53 -> 6.4.106 (#478152)

This commit is contained in:
Fabian Affolter
2026-01-09 08:14:20 +00:00
committed by GitHub
5 changed files with 781 additions and 403 deletions
+2 -1
View File
@@ -1,6 +1,7 @@
# frozen_string_literal: true
source "https://rubygems.org"
gem "metasploit-framework", git: "https://github.com/rapid7/metasploit-framework", ref: "refs/tags/6.4.53"
gem "metasploit-framework", git: "https://github.com/rapid7/metasploit-framework", ref: "refs/tags/6.4.106"
gem "syslog", "~> 0.3.0"
gem 'mini_portile2', '~> 2.8.0'
+272 -167
View File
@@ -1,14 +1,14 @@
GIT
remote: https://github.com/rapid7/metasploit-framework
revision: ce6990ff84c944186dfa104b3aa1edd98962b468
ref: refs/tags/6.4.53
revision: a8698e72f54049c520b47322b7d5e4df59110abc
ref: refs/tags/6.4.106
specs:
metasploit-framework (6.4.53)
metasploit-framework (6.4.106)
aarch64
abbrev
actionpack (~> 7.0.0)
activerecord (~> 7.0.0)
activesupport (~> 7.0.0)
actionpack (~> 7.2.0)
activerecord (~> 7.2.0)
activesupport (~> 7.2.0)
aws-sdk-ec2
aws-sdk-ec2instanceconnect
aws-sdk-iam
@@ -22,8 +22,8 @@ GIT
bootsnap
bson
chunky_png
concurrent-ruby (= 1.3.4)
csv
date (= 3.4.1)
dnsruby
drb
ed25519
@@ -31,7 +31,7 @@ GIT
em-http-request
eventmachine
faker
faraday (= 2.7.11)
faraday
faraday-retry
faye-websocket
ffi (< 1.17.0)
@@ -40,16 +40,17 @@ GIT
getoptlong
hrr_rb_ssh-ed25519
http-cookie
irb (~> 1.7.4)
irb
jsobfu
json
lru_redux
metasm
metasploit-concern
metasploit-credential
metasploit-model
metasploit-payloads (= 2.0.189)
metasploit_data_models
metasploit_payloads-mettle (= 1.0.35)
metasploit-payloads (= 2.0.237)
metasploit_data_models (>= 6.0.7)
metasploit_payloads-mettle (= 1.0.45)
mqtt
msgpack (~> 1.6.0)
mutex_m
@@ -62,22 +63,25 @@ GIT
network_interface
nexpose
nokogiri
octokit (~> 4.0)
octokit
openssl-ccm
openvas-omp
ostruct
packetfu
parallel
patch_finder
pcaprub
pdf-reader
pg
puma
rack (~> 2.2)
railties
rasn1 (= 0.14.0)
rb-readline
recog
redcarpet
reline
rest-client
rex-arch
rex-bin_tools
rex-core
@@ -96,16 +100,20 @@ GIT
rex-struct2
rex-text
rex-zip
rexml (= 3.4.1)
rinda
ruby-macho
ruby-mysql
ruby_smb (~> 3.3.3)
ruby_smb (~> 3.3.15)
rubyntlm
rubyzip
sinatra
sinatra (~> 3.2)
sqlite3 (= 1.7.3)
sshkey
stringio (= 3.1.1)
swagger-blocks
thin
syslog
thin (~> 1.x)
tzinfo
tzinfo-data
unix-crypt
@@ -120,88 +128,109 @@ GIT
GEM
remote: https://rubygems.org/
specs:
Ascii85 (1.1.1)
Ascii85 (2.0.1)
aarch64 (2.1.0)
racc (~> 1.6)
abbrev (0.1.2)
actionpack (7.0.8.6)
actionview (= 7.0.8.6)
activesupport (= 7.0.8.6)
rack (~> 2.0, >= 2.2.4)
actionpack (7.2.3)
actionview (= 7.2.3)
activesupport (= 7.2.3)
cgi
nokogiri (>= 1.8.5)
racc
rack (>= 2.2.4, < 3.3)
rack-session (>= 1.0.1)
rack-test (>= 0.6.3)
rails-dom-testing (~> 2.0)
rails-html-sanitizer (~> 1.0, >= 1.2.0)
actionview (7.0.8.6)
activesupport (= 7.0.8.6)
rails-dom-testing (~> 2.2)
rails-html-sanitizer (~> 1.6)
useragent (~> 0.16)
actionview (7.2.3)
activesupport (= 7.2.3)
builder (~> 3.1)
erubi (~> 1.4)
rails-dom-testing (~> 2.0)
rails-html-sanitizer (~> 1.1, >= 1.2.0)
activemodel (7.0.8.6)
activesupport (= 7.0.8.6)
activerecord (7.0.8.6)
activemodel (= 7.0.8.6)
activesupport (= 7.0.8.6)
activesupport (7.0.8.6)
concurrent-ruby (~> 1.0, >= 1.0.2)
cgi
erubi (~> 1.11)
rails-dom-testing (~> 2.2)
rails-html-sanitizer (~> 1.6)
activemodel (7.2.3)
activesupport (= 7.2.3)
activerecord (7.2.3)
activemodel (= 7.2.3)
activesupport (= 7.2.3)
timeout (>= 0.4.0)
activesupport (7.2.3)
base64
benchmark (>= 0.3)
bigdecimal
concurrent-ruby (~> 1.0, >= 1.3.1)
connection_pool (>= 2.2.5)
drb
i18n (>= 1.6, < 2)
logger (>= 1.4.2)
minitest (>= 5.1)
tzinfo (~> 2.0)
addressable (2.8.7)
public_suffix (>= 2.0.2, < 7.0)
afm (0.2.2)
arel-helpers (2.15.0)
activerecord (>= 3.1.0, < 8)
aws-eventstream (1.3.0)
aws-partitions (1.999.0)
aws-sdk-core (3.211.0)
securerandom (>= 0.3)
tzinfo (~> 2.0, >= 2.0.5)
addressable (2.8.8)
public_suffix (>= 2.0.2, < 8.0)
afm (1.0.0)
arel-helpers (2.17.0)
activerecord (>= 3.1.0)
aws-eventstream (1.4.0)
aws-partitions (1.1201.0)
aws-sdk-core (3.241.2)
aws-eventstream (~> 1, >= 1.3.0)
aws-partitions (~> 1, >= 1.992.0)
aws-sigv4 (~> 1.9)
base64
bigdecimal
jmespath (~> 1, >= 1.6.1)
aws-sdk-ec2 (1.486.0)
aws-sdk-core (~> 3, >= 3.210.0)
logger
aws-sdk-ec2 (1.588.0)
aws-sdk-core (~> 3, >= 3.241.0)
aws-sigv4 (~> 1.5)
aws-sdk-ec2instanceconnect (1.52.0)
aws-sdk-core (~> 3, >= 3.210.0)
aws-sdk-ec2instanceconnect (1.67.0)
aws-sdk-core (~> 3, >= 3.241.0)
aws-sigv4 (~> 1.5)
aws-sdk-iam (1.112.0)
aws-sdk-core (~> 3, >= 3.210.0)
aws-sdk-iam (1.138.0)
aws-sdk-core (~> 3, >= 3.241.0)
aws-sigv4 (~> 1.5)
aws-sdk-kms (1.95.0)
aws-sdk-core (~> 3, >= 3.210.0)
aws-sdk-kms (1.119.0)
aws-sdk-core (~> 3, >= 3.241.0)
aws-sigv4 (~> 1.5)
aws-sdk-s3 (1.169.0)
aws-sdk-core (~> 3, >= 3.210.0)
aws-sdk-s3 (1.210.1)
aws-sdk-core (~> 3, >= 3.241.0)
aws-sdk-kms (~> 1)
aws-sigv4 (~> 1.5)
aws-sdk-ssm (1.183.0)
aws-sdk-core (~> 3, >= 3.210.0)
aws-sdk-ssm (1.208.0)
aws-sdk-core (~> 3, >= 3.241.0)
aws-sigv4 (~> 1.5)
aws-sigv4 (1.10.1)
aws-sigv4 (1.12.1)
aws-eventstream (~> 1, >= 1.0.2)
base64 (0.2.0)
bcrypt (3.1.20)
bcrypt_pbkdf (1.1.1)
benchmark (0.4.0)
bigdecimal (3.1.8)
base64 (0.3.0)
bcrypt (3.1.21)
bcrypt_pbkdf (1.1.2)
benchmark (0.5.0)
bigdecimal (4.0.1)
bindata (2.4.15)
bootsnap (1.18.4)
bootsnap (1.20.1)
msgpack (~> 1.2)
bson (5.0.1)
bson (5.2.0)
builder (3.3.0)
cgi (0.5.1)
chunky_png (1.4.0)
concurrent-ruby (1.3.4)
concurrent-ruby (1.3.6)
connection_pool (3.0.2)
cookiejar (0.3.4)
crass (1.0.6)
csv (3.3.0)
csv (3.3.5)
daemons (1.4.1)
date (3.3.4)
dnsruby (1.72.2)
date (3.4.1)
dnsruby (1.73.1)
base64 (>= 0.2)
logger (~> 1.6)
simpleidn (~> 0.2.1)
domain_name (0.6.20240107)
drb (2.2.1)
ed25519 (1.3.0)
drb (2.2.3)
ed25519 (1.4.0)
elftools (1.3.1)
bindata (~> 2)
em-http-request (1.1.7)
@@ -213,23 +242,26 @@ GEM
em-socksify (0.3.3)
base64
eventmachine (>= 1.0.0.beta.4)
erubi (1.13.0)
erb (6.0.1)
erubi (1.13.1)
eventmachine (1.2.7)
faker (3.5.1)
faker (3.5.3)
i18n (>= 1.8.11, < 2)
faraday (2.7.11)
base64
faraday-net_http (>= 2.0, < 3.1)
ruby2_keywords (>= 0.0.4)
faraday-net_http (3.0.2)
faraday-retry (2.2.1)
faraday (2.14.0)
faraday-net_http (>= 2.0, < 3.5)
json
logger
faraday-net_http (3.4.2)
net-http (~> 0.5)
faraday-retry (2.4.0)
faraday (~> 2.0)
faye-websocket (0.11.3)
faye-websocket (0.12.0)
eventmachine (>= 0.12.0)
websocket-driver (>= 0.5.1)
websocket-driver (>= 0.8.0)
ffi (1.16.3)
fiddle (1.1.6)
fiddle (1.1.8)
filesize (0.2.0)
forwardable (1.4.0)
getoptlong (0.2.1)
gssapi (1.3.1)
ffi (>= 1.0.1)
@@ -241,194 +273,261 @@ GEM
hrr_rb_ssh-ed25519 (0.4.2)
ed25519 (~> 1.2)
hrr_rb_ssh (>= 0.4)
http-cookie (1.0.7)
http-accept (1.7.0)
http-cookie (1.1.0)
domain_name (~> 0.5)
http_parser.rb (0.8.0)
httpclient (2.8.3)
i18n (1.14.6)
http_parser.rb (0.8.1)
httpclient (2.9.0)
mutex_m
i18n (1.14.8)
concurrent-ruby (~> 1.0)
io-console (0.7.2)
irb (1.7.4)
reline (>= 0.3.6)
io-console (0.8.2)
ipaddr (1.2.8)
irb (1.16.0)
pp (>= 0.6.0)
rdoc (>= 4.0.0)
reline (>= 0.4.2)
jmespath (1.6.2)
jsobfu (0.4.2)
rkelly-remix
json (2.7.5)
json (2.18.0)
little-plugger (1.1.4)
logger (1.6.6)
logger (1.7.0)
logging (2.4.0)
little-plugger (~> 1.1)
multi_json (~> 1.14)
loofah (2.23.1)
loofah (2.25.0)
crass (~> 1.0.2)
nokogiri (>= 1.12.0)
lru_redux (1.1.0)
metasm (1.0.5)
metasploit-concern (5.0.3)
metasploit-concern (5.0.5)
activemodel (~> 7.0)
activesupport (~> 7.0)
drb
mutex_m
railties (~> 7.0)
zeitwerk
metasploit-credential (6.0.11)
metasploit-credential (6.0.16)
bigdecimal
csv
drb
metasploit-concern
metasploit-model
metasploit_data_models (>= 5.0.0)
mutex_m
net-ssh
pg
railties
rex-socket
rubyntlm
rubyzip
metasploit-model (5.0.2)
metasploit-model (5.0.4)
activemodel (~> 7.0)
activesupport (~> 7.0)
bigdecimal
drb
mutex_m
railties (~> 7.0)
metasploit-payloads (2.0.189)
metasploit_data_models (6.0.5)
metasploit-payloads (2.0.237)
metasploit_data_models (6.0.11)
activerecord (~> 7.0)
activesupport (~> 7.0)
arel-helpers
bigdecimal
drb
metasploit-concern
metasploit-model (>= 3.1)
mutex_m
pg
railties (~> 7.0)
recog
webrick
metasploit_payloads-mettle (1.0.35)
method_source (1.1.0)
mini_portile2 (2.8.7)
minitest (5.25.1)
mqtt (0.6.0)
metasploit_payloads-mettle (1.0.45)
mime-types (3.7.0)
logger
mime-types-data (~> 3.2025, >= 3.2025.0507)
mime-types-data (3.2025.0924)
mini_portile2 (2.8.9)
minitest (6.0.1)
prism (~> 1.5)
mqtt (0.7.0)
logger
msgpack (1.6.1)
multi_json (1.15.0)
mustermann (3.0.3)
multi_json (1.19.1)
mustermann (3.0.4)
ruby2_keywords (~> 0.0.1)
mutex_m (0.2.0)
mutex_m (0.3.0)
nessus_rest (0.1.6)
net-imap (0.5.0)
net-http (0.9.1)
uri (>= 0.11.1)
net-imap (0.6.2)
date
net-protocol
net-ldap (0.19.0)
net-ldap (0.20.0)
base64
ostruct
net-protocol (0.2.2)
timeout
net-sftp (4.0.0)
net-ssh (>= 5.0.0, < 8.0.0)
net-smtp (0.5.0)
net-smtp (0.5.1)
net-protocol
net-ssh (7.3.0)
netrc (0.11.0)
network_interface (0.0.4)
nexpose (7.3.0)
nio4r (2.7.4)
nokogiri (1.16.7)
nio4r (2.7.5)
nokogiri (1.19.0)
mini_portile2 (~> 2.8.2)
racc (~> 1.4)
nori (2.7.1)
bigdecimal
octokit (4.25.1)
octokit (10.0.0)
faraday (>= 1, < 3)
sawyer (~> 0.9)
openssl-ccm (1.2.3)
openssl-cmac (2.0.2)
openssl (3.3.2)
openssl-ccm (1.3.0)
openssl (~> 3.0)
openssl-cmac (2.1.0)
openssl (~> 3.0)
openvas-omp (0.0.4)
ostruct (0.6.1)
ostruct (0.6.3)
packetfu (2.0.0)
pcaprub (~> 0.13.1)
parallel (1.27.0)
patch_finder (1.0.2)
pcaprub (0.13.3)
pdf-reader (2.12.0)
Ascii85 (~> 1.0)
afm (~> 0.2.1)
pdf-reader (2.15.1)
Ascii85 (>= 1.0, < 3.0, != 2.0.0)
afm (>= 0.2.1, < 2)
hashery (~> 2.0)
ruby-rc4
ttfunk
pg (1.5.9)
public_suffix (6.0.1)
puma (6.4.3)
pg (1.6.3)
pp (0.6.3)
prettyprint
prettyprint (0.2.0)
prism (1.7.0)
psych (5.3.1)
date
stringio
public_suffix (7.0.2)
puma (7.1.0)
nio4r (~> 2.0)
racc (1.8.1)
rack (2.2.10)
rack (2.2.21)
rack-protection (3.2.0)
base64 (>= 0.1.0)
rack (~> 2.2, >= 2.2.4)
rack-test (2.1.0)
rack-session (1.0.2)
rack (< 3)
rack-test (2.2.0)
rack (>= 1.3)
rails-dom-testing (2.2.0)
rackup (1.0.1)
rack (< 3)
webrick
rails-dom-testing (2.3.0)
activesupport (>= 5.0.0)
minitest
nokogiri (>= 1.6)
rails-html-sanitizer (1.6.0)
rails-html-sanitizer (1.6.2)
loofah (~> 2.21)
nokogiri (~> 1.14)
railties (7.0.8.6)
actionpack (= 7.0.8.6)
activesupport (= 7.0.8.6)
method_source
nokogiri (>= 1.15.7, != 1.16.7, != 1.16.6, != 1.16.5, != 1.16.4, != 1.16.3, != 1.16.2, != 1.16.1, != 1.16.0.rc1, != 1.16.0)
railties (7.2.3)
actionpack (= 7.2.3)
activesupport (= 7.2.3)
cgi
irb (~> 1.13)
rackup (>= 1.0.0)
rake (>= 12.2)
thor (~> 1.0)
zeitwerk (~> 2.5)
rake (13.2.1)
thor (~> 1.0, >= 1.2.2)
tsort (>= 0.2)
zeitwerk (~> 2.6)
rake (13.3.1)
rasn1 (0.14.0)
strptime (~> 0.2.5)
rb-readline (0.5.5)
recog (3.1.11)
rdoc (7.0.3)
erb
psych (>= 4.0.0)
tsort
recog (3.1.25)
nokogiri
redcarpet (3.6.0)
reline (0.5.10)
redcarpet (3.6.1)
reline (0.6.3)
io-console (~> 0.5)
rex-arch (0.1.16)
rest-client (2.1.0)
http-accept (>= 1.7.0, < 2.0)
http-cookie (>= 1.0.2, < 2.0)
mime-types (>= 1.16, < 4.0)
netrc (~> 0.8)
rex-arch (0.1.18)
rex-text
rex-bin_tools (0.1.9)
rex-bin_tools (0.1.12)
metasm
rex-arch
rex-core
rex-struct2
rex-text
rex-core (0.1.32)
rex-encoder (0.1.7)
rex-core (0.1.35)
rex-encoder (0.1.8)
metasm
rex-arch
rex-text
rex-exploitation (0.1.40)
rex-exploitation (0.1.44)
bigdecimal
jsobfu
metasm
racc
rex-arch
rex-encoder
rex-text
rexml
rex-java (0.1.7)
rex-mime (0.1.8)
rex-java (0.1.8)
rex-mime (0.1.12)
bigdecimal
rex-text
rex-nop (0.1.3)
rex-nop (0.1.4)
rex-arch
rex-ole (0.1.8)
rex-ole (0.1.9)
rex-text
rex-powershell (0.1.100)
rex-powershell (0.1.103)
bigdecimal
rex-random_identifier
rex-text
ruby-rc4
rex-random_identifier (0.1.13)
rex-random_identifier (0.1.21)
bigdecimal
rex-text
rex-registry (0.1.5)
rex-rop_builder (0.1.5)
rex-registry (0.1.6)
rex-rop_builder (0.1.6)
metasm
rex-core
rex-text
rex-socket (0.1.57)
rex-socket (0.1.64)
dnsruby
rex-core
rex-sslscan (0.1.10)
rex-sslscan (0.1.13)
rex-core
rex-socket
rex-text
rex-struct2 (0.1.4)
rex-text (0.2.59)
rex-zip (0.1.5)
rex-struct2 (0.1.5)
rex-text (0.2.61)
bigdecimal
rex-zip (0.1.6)
rex-text
rexml (3.3.9)
rexml (3.4.1)
rinda (0.2.0)
drb
forwardable
ipaddr
rkelly-remix (0.0.7)
ruby-macho (4.1.0)
ruby-mysql (4.1.0)
ruby-mysql (4.2.1)
ruby-rc4 (0.1.5)
ruby2_keywords (0.0.5)
ruby_smb (3.3.11)
ruby_smb (3.3.16)
bindata (= 2.4.15)
openssl-ccm
openssl-cmac
@@ -436,10 +535,11 @@ GEM
windows_error (>= 0.1.4)
rubyntlm (0.6.5)
base64
rubyzip (2.3.2)
sawyer (0.9.2)
rubyzip (3.2.2)
sawyer (0.9.3)
addressable (>= 2.3.5)
faraday (>= 0.17.3, < 3)
securerandom (0.4.1)
simpleidn (0.2.3)
sinatra (3.2.0)
mustermann (~> 3.0)
@@ -449,6 +549,7 @@ GEM
sqlite3 (1.7.3)
mini_portile2 (~> 2.8.0)
sshkey (3.0.0)
stringio (3.1.1)
strptime (0.2.5)
swagger-blocks (3.0.0)
syslog (0.3.0)
@@ -457,20 +558,23 @@ GEM
daemons (~> 1.0, >= 1.0.9)
eventmachine (~> 1.0, >= 1.0.4)
rack (>= 1, < 3)
thor (1.3.2)
tilt (2.4.0)
timeout (0.4.1)
ttfunk (1.8.0)
bigdecimal (~> 3.1)
thor (1.5.0)
tilt (2.6.1)
timeout (0.6.0)
tsort (0.2.0)
ttfunk (1.7.0)
tzinfo (2.0.6)
concurrent-ruby (~> 1.0)
tzinfo-data (1.2024.2)
tzinfo-data (1.2025.3)
tzinfo (>= 1.0.0)
unix-crypt (1.3.1)
uri (1.1.1)
useragent (0.16.11)
warden (1.2.9)
rack (>= 2.0.9)
webrick (1.8.2)
websocket-driver (0.7.6)
webrick (1.9.2)
websocket-driver (0.8.0)
base64
websocket-extensions (>= 0.1.0)
websocket-extensions (0.1.5)
win32api (0.1.0)
@@ -490,14 +594,15 @@ GEM
activesupport (>= 4.2, < 8.0)
xmlrpc (0.3.3)
webrick
zeitwerk (2.6.18)
zeitwerk (2.7.4)
PLATFORMS
ruby
DEPENDENCIES
metasploit-framework!
mini_portile2 (~> 2.8.0)
syslog (~> 0.3.0)
BUNDLED WITH
2.5.22
2.7.2
+14 -2
View File
@@ -18,13 +18,13 @@ let
in
stdenv.mkDerivation (finalAttrs: {
pname = "metasploit-framework";
version = "6.4.53";
version = "6.4.106";
src = fetchFromGitHub {
owner = "rapid7";
repo = "metasploit-framework";
tag = finalAttrs.version;
hash = "sha256-yHat9U8EZbUWo4j9ut6K9IPtPFm130pfSmIuhtQhFoQ=";
hash = "sha256-FpSx6CuVa2fOCoJesQcK+Nft+6k8iPDKyGvTec8TMbo=";
};
nativeBuildInputs = [
@@ -37,6 +37,17 @@ stdenv.mkDerivation (finalAttrs: {
dontPatchELF = true; # stay away from exploit executables
postPatch = ''
# Patch the boot script to disable bootsnap.
# Bootsnap tries to write cache files to the frozen /nix/store, causing a crash on startup.
sed -i '/bootsnap\/setup/d' config/boot.rb
# Remove the strict version check for ActionView.
# Metasploit upstream enforces a specific patch version (e.g., 7.2.2.2), but our bundler
# environment may resolve to a newer, compatible version (e.g., 7.2.3), causing the app to raise an exception.
sed -i "/ActionView::VERSION::STRING == /d" config/application.rb
'';
installPhase = ''
runHook preInstall
@@ -81,6 +92,7 @@ stdenv.mkDerivation (finalAttrs: {
maintainers = with lib.maintainers; [
fab
makefu
Misaka13514
];
mainProgram = "msfconsole";
};
File diff suppressed because it is too large Load Diff
+1 -1
View File
@@ -9,7 +9,7 @@ echo "Updating metasploit to $latest"
sed -i "s#refs/tags/.*#refs/tags/$latest\"#" Gemfile
bundler install
BUNDLE_FORCE_RUBY_PLATFORM=true bundle lock --update
bundix
sed -i '/[ ]*dependencies =/d' gemset.nix