ruby代码是否可以使用;要求';无国界医生/核心和#x27&引用;是否在Metasploit之外使用?
我正在研究,发现LotusCMS被用于web应用程序中ruby代码是否可以使用;要求';无国界医生/核心和#x27&引用;是否在Metasploit之外使用?,ruby,security,metasploit,ctf,Ruby,Security,Metasploit,Ctf,我正在研究,发现LotusCMS被用于web应用程序中 kali@kali:~$ curl 10.10.10.10 2>/dev/null | grep -i cms <meta name="keywords" content="LotusCMS" /> <p>We've revamped our website for the new release of the new gallery CMS we made. We are geared towards s
kali@kali:~$ curl 10.10.10.10 2>/dev/null | grep -i cms
<meta name="keywords" content="LotusCMS" />
<p>We've revamped our website for the new release of the new gallery CMS we made. We are geared towards security...</p>
kali@kali:~$
我检查了代码的内容,发现它是Metasploit框架的一部分
kali@kali:~$ cat -n /usr/share/exploitdb/exploits/php/remote/18565.rb | more
1 ##
2 # This file is part of the Metasploit Framework and may be subject to
3 # redistribution and commercial restrictions. Please see the Metasploit
4 # Framework web site for more information on licensing and terms of use.
5 # http://metasploit.com/framework/
6 ##
7
8 require 'msf/core'
9
10 class Metasploit3 < Msf::Exploit::Remote
11 Rank = ExcellentRanking
kali@kali:~$cat-n/usr/share/exploitdb/exploits/php/remote/18565.rb |更多
1 ##
2#此文件是Metasploit框架的一部分,可能会受到
3.再分配和商业限制。请看Metasploit
4#有关许可和使用条款的更多信息,请访问框架网站。
5 # http://metasploit.com/framework/
6 ##
7.
8需要“无国界医生/核心”
9
10类Metasploit3
当我尝试执行代码时
kali@kali:~$ ruby /usr/share/exploitdb/exploits/php/remote/18565.rb
Traceback (most recent call last):
`2: from /usr/share/exploitdb/exploits/php/remote/18565.rb:8:in \`<main>'`
`1: from /usr/lib/ruby/2.7.0/rubygems/core_ext/kernel_require.rb:92:in \`require'`
/usr/lib/ruby/2.7.0/rubygems/core_ext/kernel_require.rb:92:in \require': cannot load such file -- msf/core (LoadError)`
kali@kali:~$
kali@kali:~$ruby/usr/share/exploitdb/exploits/php/remote/18565.rb
回溯(最近一次呼叫最后一次):
`2:from/usr/share/exploitdb/exploits/php/remote/18565.rb:8:in\`'`
`1:from/usr/lib/ruby/2.7.0/rubygems/core\u ext/kernel\u require.rb:92:in\'require'`
/usr/lib/ruby/2.7.0/rubygems/core\u ext/kernel\u require.rb:92:in\require':无法加载此类文件--msf/core(LoadError)`
kali@kali:~$
由于OSCP考试中不允许使用此代码,是否可以在没有Metasploit的情况下使用此代码
kali@kali:~$ ruby /usr/share/exploitdb/exploits/php/remote/18565.rb
Traceback (most recent call last):
`2: from /usr/share/exploitdb/exploits/php/remote/18565.rb:8:in \`<main>'`
`1: from /usr/lib/ruby/2.7.0/rubygems/core_ext/kernel_require.rb:92:in \`require'`
/usr/lib/ruby/2.7.0/rubygems/core_ext/kernel_require.rb:92:in \require': cannot load such file -- msf/core (LoadError)`
kali@kali:~$