search

rapid7 / metasploit-framework

Metasploit Framework
https://www.metasploit.com/
Other
34.15k stars 13.97k forks source link

post/osx/gather/enum_osx: review and rewrite #14022

Open bcoles opened 4 years ago

bcoles commented 4 years ago

The post/osx/gather/enum_osx module has had many problems, including security vulnerabilities (#14008), syntax errors going back over a decade (#14016), implementation flaws which have existed for many years (#14006, https://github.com/rapid7/metasploit-framework/issues/10076#issuecomment-455832291), and fails to retrieve expected data (https://github.com/rapid7/metasploit-framework/pull/14016#issuecomment-675604104).

Some of these issues have been fixed or partially fixed.

The module clearly hasn't been tested thoroughly or used frequently. It has also rarely been updated for newer versions of OSX since it was first written, and rarely updated to take advantage of newly implemented Post APIs.

Review and rewrite.

github-actions[bot] commented 4 years ago

Hi!

This issue has been left open with no activity for a while now.

We get a lot of issues, so we currently close issues after 60 days of inactivity. It’s been at least 30 days since the last update here. If we missed this issue or if you want to keep it open, please reply here. You can also add the label "not stale" to keep this issue open!

As a friendly reminder: the best way to see this issue, or any other, fixed is to open a Pull Request.