dnrops
/
metasploit-framework
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix AARCH64 MachO Generation 

This updates the exe util to properly generate stageless aarch64 macho
payloads. I've also added comments on how to assemble the aarch64
stages.
This commit is contained in:
usiegl00 2023-03-04 10:32:05 +09:00
parent 8c4c260911
commit 8a5442f7f0
3 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
external/source/shellcode/osx/aarch64/stage_mettle.s vendored
View File

@ -1,3 +1,5 @@
// Compile: clang stage_mettle.s
// Shellcode: objdump -d a.out | cut -d ' ' -f 2-5
.equ SYS_RECVFROM, 0x200001d
.equ SYS_MPROTECT, 0x200004a
.equ SYS_MMAP, 0x20000c5

2
external/source/shellcode/osx/aarch64/stager_sock_reverse.s vendored
View File

@ -1,3 +1,5 @@
// Compile: clang stager_sock_reverse.s
// Shellcode: objdump -d a.out | cut -d ' ' -f 2-5
.equ SYS_RECVFROM, 0x200001d
.equ SYS_MPROTECT, 0x200004a
.equ SYS_CONNECT, 0x2000062

3
lib/msf/util/exe.rb
View File

@ -166,6 +166,7 @@ require 'digest/sha1'
if plat.index(Msf::Module::Platform::Linux)
return to_linux_aarch64_elf(framework, code)
end
if plat.index(Msf::Module::Platform::OSX)
return to_osx_aarch64_macho(framework, code)
end
@ -2159,6 +2160,8 @@ require 'digest/sha1'
to_osx_arm_macho(framework, code, exeopts)
when ARCH_PPC
to_osx_ppc_macho(framework, code, exeopts)
when ARCH_AARCH64
to_osx_aarch64_macho(framework, code, exeopts)
end
end
fmt == 'osx-app' ? Msf::Util::EXE.to_osx_app(macho) : macho