mirror of
https://github.com/pentoo/pentoo-overlay
synced 2026-05-02 03:30:48 +02:00
metasploit: fork to exclude an oudated openvas
This commit is contained in:
blshkv
parent
ec83a78c4a
commit
f2af67ba4a
3 changed files with 386 additions and 0 deletions
1
net-analyzer/metasploit/Manifest
Normal file
1
net-analyzer/metasploit/Manifest
Normal file
|
|
@ -0,0 +1 @@
|
|||
DIST metasploit-4.17.21.tar.gz 28812125 BLAKE2B 15ff8ccac99d783b7b9cd20d6512df551b3143b4947d2f347b2558d1bafd2861d41fe6b051034c75cd25030ad85d26f261ffe9149dd27d551f92f17fcc0b4075 SHA512 00763f515bc6b556d4dbe15a7c58fac3c7febb64fb339fd5c05ad2b18b5b55bdf8815daca35f24bb22bea3d376db4f4610918730d813079e5ac3f8d5ad16d2d9
|
||||
34
net-analyzer/metasploit/files/database.yml
Normal file
34
net-analyzer/metasploit/files/database.yml
Normal file
|
|
@ -0,0 +1,34 @@
|
|||
#
|
||||
# The tests currently use the development user
|
||||
# https://dev.metasploit.com/redmine/issues/8418
|
||||
#
|
||||
|
||||
development:
|
||||
adapter: "postgresql"
|
||||
database: "msf_test_database"
|
||||
username: "msf_test_user"
|
||||
password: "secure"
|
||||
port: 5432
|
||||
host: "localhost"
|
||||
pool: 256
|
||||
timeout: 5
|
||||
|
||||
production:
|
||||
adapter: "postgresql"
|
||||
database: "msf_database"
|
||||
username: "msf_user"
|
||||
password: "secure"
|
||||
port: 5432
|
||||
host: "localhost"
|
||||
pool: 256
|
||||
timeout: 5
|
||||
|
||||
test:
|
||||
adapter: "postgresql"
|
||||
database: "msf_test_database"
|
||||
username: "msf_test_user"
|
||||
password: "secure"
|
||||
port: 5432
|
||||
host: "localhost"
|
||||
pool: 256
|
||||
timeout: 5
|
||||
351
net-analyzer/metasploit/metasploit-4.17.21-r7.ebuild
Normal file
351
net-analyzer/metasploit/metasploit-4.17.21-r7.ebuild
Normal file
|
|
@ -0,0 +1,351 @@
|
|||
# Copyright 1999-2019 Gentoo Authors
|
||||
# Distributed under the terms of the GNU General Public License v2
|
||||
|
||||
EAPI="6"
|
||||
|
||||
#never ever ever have more than one ruby in here
|
||||
USE_RUBY="ruby24"
|
||||
inherit eutils ruby-ng
|
||||
|
||||
if [[ ${PV} == "9999" ]] ; then
|
||||
EGIT_REPO_URI="https://github.com/rapid7/metasploit-framework.git"
|
||||
EGIT_BRANCH="4.x"
|
||||
EGIT_CHECKOUT_DIR="${WORKDIR}"/all
|
||||
inherit git-r3
|
||||
KEYWORDS="~arm"
|
||||
SLOT="9999"
|
||||
else
|
||||
##Tags https://github.com/rapid7/metasploit-framework/releases
|
||||
MY_PV=${PV/_p/-}
|
||||
SRC_URI="https://github.com/rapid7/metasploit-framework/archive/${MY_PV}.tar.gz -> ${P}.tar.gz"
|
||||
KEYWORDS="~amd64 ~arm ~x86"
|
||||
RUBY_S="${PN}-framework-${MY_PV}"
|
||||
inherit eapi7-ver
|
||||
SLOT="$(ver_cut 1).$(ver_cut 2)"
|
||||
fi
|
||||
|
||||
DESCRIPTION="Advanced framework for developing, testing, and using vulnerability exploit code"
|
||||
HOMEPAGE="http://www.metasploit.org/"
|
||||
LICENSE="BSD"
|
||||
IUSE="development +java nexpose oracle +pcap test"
|
||||
|
||||
#multiple known bugs with tests reported upstream and ignored
|
||||
#http://dev.metasploit.com/redmine/issues/8418 - worked around (fix user creation when possible)
|
||||
RESTRICT="test"
|
||||
|
||||
#grep spec.add_runtime_dependency metasploit-framework.gemspec | sort
|
||||
RUBY_COMMON_DEPEND="virtual/ruby-ssl
|
||||
>=dev-ruby/actionpack-4.2.6:4.2
|
||||
>=dev-ruby/activerecord-4.2.6:4.2
|
||||
>=dev-ruby/activesupport-4.2.6:4.2
|
||||
dev-ruby/backports
|
||||
dev-ruby/bcrypt-ruby
|
||||
dev-ruby/bcrypt_pbkdf
|
||||
dev-ruby/bit-struct
|
||||
dev-ruby/bundler
|
||||
dev-ruby/dnsruby
|
||||
dev-ruby/faker:0
|
||||
dev-ruby/faraday
|
||||
dev-ruby/filesize:*
|
||||
dev-ruby/jsobfu:*
|
||||
dev-ruby/json:*
|
||||
dev-ruby/metasm:*
|
||||
dev-ruby/metasploit-concern
|
||||
<dev-ruby/metasploit-credential-3.0.0
|
||||
<dev-ruby/metasploit_data_models-3.0.0
|
||||
dev-ruby/metasploit-model
|
||||
dev-ruby/metasploit-payloads:1.3.53
|
||||
dev-ruby/metasploit_payloads-mettle:0.4.2
|
||||
dev-ruby/mqtt
|
||||
dev-ruby/msgpack
|
||||
dev-ruby/net-ssh:*
|
||||
dev-ruby/ed25519
|
||||
dev-ruby/nokogiri
|
||||
dev-ruby/octokit
|
||||
dev-ruby/openssl-ccm:1.2.1
|
||||
dev-ruby/packetfu:1.1.13
|
||||
dev-ruby/patch_finder
|
||||
dev-ruby/pdf-reader:*
|
||||
~dev-ruby/pg-0.21.0
|
||||
dev-ruby/railties:*
|
||||
dev-ruby/rb-readline
|
||||
dev-ruby/recog:*
|
||||
dev-ruby/redcarpet
|
||||
dev-ruby/rex-arch
|
||||
dev-ruby/rex-bin_tools
|
||||
dev-ruby/rex-core
|
||||
dev-ruby/rex-encoder
|
||||
dev-ruby/rex-exploitation
|
||||
dev-ruby/rex-java
|
||||
dev-ruby/rex-mime
|
||||
dev-ruby/rex-nop
|
||||
dev-ruby/rex-ole
|
||||
<dev-ruby/rex-powershell-0.1.78
|
||||
dev-ruby/rex-random_identifier
|
||||
dev-ruby/rex-registry
|
||||
dev-ruby/rex-rop_builder
|
||||
dev-ruby/rex-socket
|
||||
dev-ruby/rex-sslscan
|
||||
dev-ruby/rex-struct2
|
||||
dev-ruby/rex-text
|
||||
dev-ruby/rex-zip
|
||||
dev-ruby/ruby-macho
|
||||
dev-ruby/rubyntlm
|
||||
dev-ruby/ruby_smb:*
|
||||
dev-ruby/rubyzip
|
||||
dev-ruby/sqlite3
|
||||
dev-ruby/sshkey
|
||||
dev-ruby/tzinfo:*
|
||||
dev-ruby/windows_error
|
||||
dev-ruby/xdr:2.0.0
|
||||
dev-ruby/xmlrpc
|
||||
java? ( dev-ruby/rjb )
|
||||
nexpose? ( dev-ruby/nexpose )
|
||||
oracle? ( dev-ruby/ruby-oci8 )
|
||||
pcap? ( dev-ruby/pcaprub:*
|
||||
dev-ruby/network_interface )
|
||||
development? ( dev-ruby/fivemat
|
||||
dev-ruby/pry
|
||||
dev-ruby/redcarpet
|
||||
dev-ruby/yard
|
||||
>=dev-ruby/rake-10.0.0
|
||||
>=dev-ruby/factory_girl-4.1.0 )"
|
||||
#lorcon doesn't support ruby21
|
||||
#lorcon? ( net-wireless/lorcon[ruby] )
|
||||
ruby_add_bdepend "${RUBY_COMMON_DEPEND}
|
||||
test? ( >=dev-ruby/factory_girl-4.1.0
|
||||
dev-ruby/fivemat
|
||||
dev-ruby/database_cleaner
|
||||
>=dev-ruby/rspec-2.12
|
||||
dev-ruby/shoulda-matchers
|
||||
dev-ruby/timecop
|
||||
>=dev-ruby/rake-10.0.0 )"
|
||||
ruby_add_rdepend "${RUBY_COMMON_DEPEND}"
|
||||
|
||||
COMMON_DEPEND="dev-db/postgresql[server]
|
||||
|| ( app-crypt/johntheripper-jumbo >=app-crypt/johntheripper-1.7.9-r1[-minimal(-)] )
|
||||
net-analyzer/nmap"
|
||||
RDEPEND+=" ${COMMON_DEPEND}
|
||||
>=app-eselect/eselect-metasploit-0.16"
|
||||
|
||||
RESTRICT="strip"
|
||||
|
||||
QA_PREBUILT="
|
||||
usr/lib*/${PN}${SLOT}/data/templates/template_x86_linux.bin
|
||||
usr/lib*/${PN}${SLOT}/data/templates/template_armle_linux.bin
|
||||
usr/lib*/${PN}${SLOT}/data/templates/template_x86_solaris.bin
|
||||
usr/lib*/${PN}${SLOT}/data/templates/template_x64_linux.bin
|
||||
usr/lib*/${PN}${SLOT}/data/templates/template_x64_linux_dll.bin
|
||||
usr/lib*/${PN}${SLOT}/data/templates/template_x86_bsd.bin
|
||||
usr/lib*/${PN}${SLOT}/data/templates/template_x64_bsd.bin
|
||||
usr/lib*/${PN}${SLOT}/data/templates/template_mipsbe_linux.bin
|
||||
usr/lib*/${PN}${SLOT}/data/templates/template_mipsle_linux.bin
|
||||
usr/lib*/${PN}${SLOT}/data/meterpreter/msflinker_linux_x86.bin
|
||||
usr/lib*/${PN}${SLOT}/data/meterpreter/ext_server_sniffer.lso
|
||||
usr/lib*/${PN}${SLOT}/data/meterpreter/ext_server_networkpug.lso
|
||||
usr/lib*/${PN}${SLOT}/data/meterpreter/ext_server_stdapi.lso
|
||||
usr/lib*/${PN}${SLOT}/data/exploits/CVE-2013-2171.bin
|
||||
usr/lib*/${PN}${SLOT}/data/exploits/CVE-2014-3153.elf
|
||||
usr/lib*/${PN}${SLOT}/data/exploits/mysql/lib_mysqludf_sys_32.so
|
||||
usr/lib*/${PN}${SLOT}/data/exploits/*
|
||||
usr/lib*/${PN}${SLOT}/data/android/libs/x86/libndkstager.so
|
||||
usr/lib*/${PN}${SLOT}/data/android/libs/mips/libndkstager.so
|
||||
usr/lib*/${PN}${SLOT}/data/android/libs/armeabi/libndkstager.so
|
||||
usr/lib*/${PN}${SLOT}/data/templates/template_x86_linux_dll.bin
|
||||
usr/lib*/${PN}${SLOT}/data/templates/template_armle_linux_dll.bin
|
||||
usr/lib*/${PN}${SLOT}/data/templates/template_aarch64_linux.bin
|
||||
"
|
||||
|
||||
pkg_setup() {
|
||||
if use test; then
|
||||
su postgres -c "dropdb msf_test_database" #this is intentionally allowed to fail
|
||||
su postgres -c "createuser msf_test_user -d -S -R"
|
||||
if [ $? -ne 0 ]; then
|
||||
su postgres -c "dropuser msf_test_user" || die
|
||||
su postgres -c "createuser msf_test_user -d -S -R" || die
|
||||
fi
|
||||
su postgres -c "createdb --owner=msf_test_user msf_test_database" || die
|
||||
fi
|
||||
ruby-ng_pkg_setup
|
||||
}
|
||||
|
||||
all_ruby_unpack() {
|
||||
if [[ ${PV} == "9999" ]] ; then
|
||||
git-r3_src_unpack
|
||||
else
|
||||
default_src_unpack
|
||||
# mv "${WORKDIR}"/all/msf3/* "${WORKDIR}"/all
|
||||
# rm -r msf3
|
||||
#msf_version=$(grep --color=never "CURRENT_VERSION =" ${S}/spec/lib/msf/core/framework_spec.rb)
|
||||
#msf_version=${msf_version#*=}
|
||||
fi
|
||||
}
|
||||
|
||||
all_ruby_prepare() {
|
||||
# add psexec patch from pull request 2657 to allow custom exe templates from any files, bypassing most AVs
|
||||
#epatch "${FILESDIR}/agix_psexec_pull-2657.patch"
|
||||
eapply_user
|
||||
|
||||
#remove random "cpuinfo" binaries which a only needed to detect which bundled john to run
|
||||
rm -r data/cpuinfo
|
||||
|
||||
#remove unneeded ruby bundler versioning files
|
||||
#Gemfile.lock contains the versions tested by the msf team but not the hard requirements
|
||||
#we regen this file in each_ruby_prepare
|
||||
rm Gemfile.lock
|
||||
|
||||
#The Gemfile contains real known deps
|
||||
sed -i "/gem 'fivemat'/s/, '1.2.1'//" Gemfile || die
|
||||
#use released packetfu
|
||||
sed -i "s/1.1.13.pre/1.1.13/" metasploit-framework.gemspec || die
|
||||
#use the stable pg
|
||||
#https://github.com/rapid7/metasploit-framework/issues/10234
|
||||
sed -i "s/dependency 'pg', '0.20.0'/dependency 'pg', '0.21.0'/" metasploit-framework.gemspec || die
|
||||
#git gems are only for ruby24 support and we are not there yet
|
||||
sed -i "/git:/d" Gemfile || die
|
||||
|
||||
#now we edit the Gemfile based on use flags
|
||||
if ! use pcap; then
|
||||
sed -i -e "/^group :pcap do/,/^end$/d" Gemfile || die
|
||||
fi
|
||||
if ! use nexpose; then
|
||||
sed -i -e "/nexpose/d" metasploit-framework.gemspec || die
|
||||
fi
|
||||
#no support for nessus right now
|
||||
#if ! use nessus; then
|
||||
sed -i -e "/nessus/d" metasploit-framework.gemspec || die
|
||||
#fi
|
||||
#this version is old, remove it
|
||||
sed -i -e "/openvas-omp/d" metasploit-framework.gemspec || die
|
||||
#even if we pass --without=blah bundler still calculates the deps and messes us up
|
||||
if ! use development; then
|
||||
sed -i -e "/^group :development do/,/^end$/d" Gemfile || die
|
||||
fi
|
||||
if ! use test; then
|
||||
sed -i -e "/^group :test/,/^end$/d" Gemfile || die
|
||||
fi
|
||||
if ! use test && ! use development; then
|
||||
sed -i -e "/^group :development/,/^end$/d" Gemfile || die
|
||||
fi
|
||||
#We don't need simplecov
|
||||
sed -i -e "/^group :coverage/,/^end$/d" Gemfile || die
|
||||
sed -i -e "s#require 'simplecov'##" spec/spec_helper.rb || die
|
||||
|
||||
#we need to edit the gemspec too, since it tries to call git instead of anything sane
|
||||
#probably a better way to fix this... if I care at some point
|
||||
sed -i -e "/^ spec.files/,/^ }/d" metasploit-framework.gemspec || die
|
||||
|
||||
#https://bugs.gentoo.org/show_bug.cgi?id=584522 no tzinfo-data by choice in gentoo
|
||||
sed -i '/tzinfo-data/d' metasploit-framework.gemspec
|
||||
|
||||
#fails without faraday in Gemfile.lock
|
||||
#despite activesupport(?) needing it, it doesn't end up there :-(
|
||||
sed -i "/'activesupport'/a \ \ spec.add_runtime_dependency 'faraday'" metasploit-framework.gemspec
|
||||
|
||||
#let's bogart msfupdate
|
||||
rm msfupdate
|
||||
echo "#!/bin/sh" > msfupdate
|
||||
echo "echo \"[*]\"" >> msfupdate
|
||||
echo "echo \"[*] Attempting to update the Metasploit Framework...\"" >> msfupdate
|
||||
echo "echo \"[*]\"" >> msfupdate
|
||||
echo "echo \"\"" >> msfupdate
|
||||
if [[ ${PV} == "9999" ]] ; then
|
||||
echo "if [ -x /usr/bin/smart-live-rebuild ]; then" >> msfupdate
|
||||
echo " smart-live-rebuild -f net-analyzer/metasploit" >> msfupdate
|
||||
echo "else" >> msfupdate
|
||||
echo " echo \"Please install app-portage/smart-live-rebuild for a better experience.\"" >> msfupdate
|
||||
echo "emerge --oneshot \"=${CATEGORY}/${PF}\"" >> msfupdate
|
||||
echo "fi" >> msfupdate
|
||||
else
|
||||
echo "echo \"Unable to update tagged version of metasploit.\"" >> msfupdate
|
||||
echo "echo \"If you want the latest please install and eselect the live version (metasploit9999)\"" >> msfupdate
|
||||
echo "echo \"emerge metasploit:9999 -vat && eselect metasploit set metasploit9999\"" >> msfupdate
|
||||
fi
|
||||
#this is set executable in src_install
|
||||
|
||||
#install our database.yml file before tests are run
|
||||
cp "${FILESDIR}"/database.yml config/
|
||||
|
||||
}
|
||||
|
||||
each_ruby_prepare() {
|
||||
MSF_ROOT="." BUNDLE_GEMFILE=Gemfile ${RUBY} -S bundle install --local || die
|
||||
MSF_ROOT="." BUNDLE_GEMFILE=Gemfile ${RUBY} -S bundle check || die
|
||||
|
||||
#force all metasploit executables to use desired ruby version
|
||||
#https://dev.metasploit.com/redmine/issues/8357
|
||||
for file in $(ls -1 msf*)
|
||||
do
|
||||
#poorly adapted from python.eclass
|
||||
sed -e "1s:^#![[:space:]]*\([^[:space:]]*/usr/bin/env[[:space:]]\)\?[[:space:]]*\([^[:space:]]*/\)\?ruby\([[:digit:]]\+\(\.[[:digit:]]\+\)\?\)\?\(\$\|[[:space:]].*\):#!\1\2${RUBY}:" -i "${file}" || die "Conversion of shebang in '${file}' failed"
|
||||
done
|
||||
}
|
||||
|
||||
each_ruby_test() {
|
||||
#review dev-python/pymongo for ways to make the test compatible with FEATURES=network-sandbox
|
||||
|
||||
#we bogart msfupdate so no point in trying to test it
|
||||
rm spec/msfupdate_spec.rb || die
|
||||
#we don't really want to be uploading to virustotal during the tests
|
||||
rm spec/tools/virustotal_spec.rb || die
|
||||
|
||||
# https://dev.metasploit.com/redmine/issues/8425
|
||||
BUNDLE_GEMFILE=Gemfile ${RUBY} -S bundle exec rake db:create || die
|
||||
BUNDLE_GEMFILE=Gemfile ${RUBY} -S bundle exec rake db:migrate || die
|
||||
|
||||
MSF_DATABASE_CONFIG=config/database.yml BUNDLE_GEMFILE=Gemfile ${RUBY} -S bundle exec rake || die
|
||||
su postgres -c "dropuser msf_test_user" || die "failed to cleanup msf_test-user"
|
||||
}
|
||||
|
||||
each_ruby_install() {
|
||||
#Tests have already been run, we don't need this stuff
|
||||
rm -r spec || die
|
||||
rm -r test || die
|
||||
rm Gemfile.lock || die
|
||||
|
||||
#I'm 99% sure that this will only work for as long as we only support one ruby version. Creativity will be needed if we wish to support multiple.
|
||||
# should be as simple as copying everything into the target...
|
||||
dodir /usr/lib/${PN}${SLOT}
|
||||
cp -R * "${ED}"/usr/lib/${PN}${SLOT} || die "Copy files failed"
|
||||
rm -Rf "${ED}"/usr/lib/${PN}${SLOT}/documentation "${ED}"/usr/lib${PN}${SLOT}/README.md
|
||||
fowners -R root:0 /
|
||||
|
||||
}
|
||||
|
||||
all_ruby_install() {
|
||||
# do not remove LICENSE, bug #238137
|
||||
dodir /usr/share/doc/${PF}
|
||||
cp -R {documentation,README.md} "${ED}"/usr/share/doc/${PF} || die
|
||||
ln -s "../../share/doc/${PF}/documentation" "${ED}/usr/lib/${PN}${SLOT}/documentation"
|
||||
|
||||
fperms +x /usr/lib/${PN}${SLOT}/msfupdate
|
||||
|
||||
#tell revdep-rebuild to ignore binaries meant for the target
|
||||
dodir /etc/revdep-rebuild
|
||||
cat <<-EOF > "${ED}"/etc/revdep-rebuild/99-metasploit${SLOT}
|
||||
#These dirs contain prebuilt binaries for running on the TARGET not the HOST
|
||||
SEARCH_DIRS_MASK="/usr/lib/${PN}${SLOT}/data/meterpreter"
|
||||
SEARCH_DIRS_MASK="/usr/lib/${PN}${SLOT}/data/exploits"
|
||||
EOF
|
||||
}
|
||||
|
||||
pkg_postinst() {
|
||||
elog "Before use you should run 'env-update' and '. /etc/profile'"
|
||||
elog "otherwise you may be missing important environmental variables."
|
||||
|
||||
elog "You need to prepare the database by running:"
|
||||
elog "emerge --config postgresql"
|
||||
elog "/etc/init.d/postgresql-<version> start"
|
||||
elog "emerge --config =metasploit-${PV}"
|
||||
|
||||
"${EROOT}"/usr/bin/eselect metasploit set --use-old ${PN}${SLOT}
|
||||
|
||||
einfo
|
||||
elog "Adjust /usr/lib/${PN}${SLOT}/config/database.yml if necessary"
|
||||
}
|
||||
|
||||
pkg_config() {
|
||||
einfo "If the following fails, it is likely because you forgot to start/config postgresql first"
|
||||
su postgres -c "createuser msf_user -D -S -R"
|
||||
su postgres -c "createdb --owner=msf_user msf_database"
|
||||
}
|
||||
Loading…
Reference in a new issue