You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
p=prog << " -d -a #{datastore['RHOST']},#{datastore['PORT']} -v "
print_status("Installing rpcap in ACTIVE mode (remote port: #{datastore['PORT']})")
else
fw_enable(prog)
print_status("Installing rpcap in PASSIVE mode (local port: #{datastore['PORT']}) ")
p=prog << " -d -p #{datastore['PORT']} "
end
ifdatastore['NULLAUTH']
p << '-n'
end
run_rpcapd(p)
end
The program file path prog is used to add a firewall rule. The p value is unused, then passed to the run_rpcapd method as cmdline, where it is used only in a print message:
print_good("Rpcapd started successfully: #{cmdline}")
else
print_error('There was an error restarting rpcapd.exe.')
end
rescueStandardError=>e
print_error("The following error was encountered: #{e.class}#{e}")
end
Perhaps the intention was for users to manually run the command printed to terminal? The module does not do it. Despite claiming that it is installing pcap in passive or active mode, no action is taken:
The
post/windows/manage/rpcapd_start
module describesp
andprog
parameters to be used in therun_rpcapd
method.metasploit-framework/modules/post/windows/manage/rpcapd_start.rb
Lines 63 to 87 in b5129fe
The program file path
prog
is used to add a firewall rule. Thep
value is unused, then passed to therun_rpcapd
method ascmdline
, where it is used only in a print message:metasploit-framework/modules/post/windows/manage/rpcapd_start.rb
Lines 89 to 98 in b5129fe
Perhaps the intention was for users to manually run the command printed to terminal? The module does not do it. Despite claiming that it is installing pcap in passive or active mode, no action is taken:
metasploit-framework/modules/post/windows/manage/rpcapd_start.rb
Lines 74 to 80 in b5129fe
The text was updated successfully, but these errors were encountered: