search

rapid7 / metasploit-framework

Metasploit Framework
https://www.metasploit.com/
Other
34.29k stars 14.01k forks source link

single_command_shell.rb crash #19615

Closed h00die closed 2 weeks ago

h00die commented 3 weeks ago
  1. Get a shell on vcenter (ssh_login with root is fine), and you'll succeed but be caught in a pseudo shell.
  2. Type shell to get to the shell, except that's intercepted by metasploit
  3. crash
[-] Session manipulation failed: undefined method `include?' for nil:NilClass ["/root/metasploit-framework/lib/msf/core/session/provider/single_command_shell.rb:122:in `set_is_echo_shell'", "/root/metasploit-framework/lib/msf/core/session/provider/single_command_shell.rb:143:in `shell_command_token_base'", "/root/metasploit-framework/lib/msf/core/session/provider/single_command_shell.rb:130:in `shell_command_token_unix'", "/root/metasploit-framework/lib/msf/core/session/provider/single_command_shell.rb:91:in `shell_command_token'", "/root/metasploit-framework/lib/msf/base/sessions/command_shell.rb:392:in `block in binary_exists'", "/root/metasploit-framework/lib/msf/base/sessions/command_shell.rb:375:in `binary_exists'", "/root/metasploit-framework/lib/msf/base/sessions/command_shell.rb:391:in `binary_exists'", "/root/metasploit-framework/lib/msf/base/sessions/command_shell.rb:335:in `cmd_shell'", "/root/metasploit-framework/lib/msf/base/sessions/command_shell.rb:623:in `run_builtin_cmd'", "/root/metasploit-framework/lib/msf/base/sessions/command_shell.rb:611:in `run_single'", "/root/metasploit-framework/lib/msf/base/sessions/command_shell.rb:820:in `_interact_stream'", "/root/metasploit-framework/lib/msf/base/sessions/command_shell.rb:796:in `block in _interact'", "/root/metasploit-framework/lib/rex/ui/text/shell/history_manager.rb:35:in `with_context'", "/root/metasploit-framework/lib/msf/base/sessions/command_shell.rb:795:in `_interact'", "/root/metasploit-framework/lib/rex/ui/interactive.rb:53:in `interact'", "/root/metasploit-framework/lib/msf/ui/console/command_dispatcher/core.rb:1749:in `cmd_sessions'", "/root/metasploit-framework/lib/rex/ui/text/dispatcher_shell.rb:582:in `run_command'", "/root/metasploit-framework/lib/rex/ui/text/dispatcher_shell.rb:531:in `block in run_single'", "/root/metasploit-framework/lib/rex/ui/text/dispatcher_shell.rb:525:in `each'", "/root/metasploit-framework/lib/rex/ui/text/dispatcher_shell.rb:525:in `run_single'", "/root/metasploit-framework/lib/rex/ui/text/shell.rb:165:in `block in run'", "/root/metasploit-framework/lib/rex/ui/text/shell.rb:309:in `block in with_history_manager_context'", "/root/metasploit-framework/lib/rex/ui/text/shell/history_manager.rb:35:in `with_context'", "/root/metasploit-framework/lib/rex/ui/text/shell.rb:306:in `with_history_manager_context'", "/root/metasploit-framework/lib/rex/ui/text/shell.rb:133:in `run'", "/root/metasploit-framework/lib/metasploit/framework/command/console.rb:54:in `start'", "/root/metasploit-framework/lib/metasploit/framework/command/base.rb:82:in `start'", "./msfconsole:23:in `<main>'"]

Full output:

[*] Starting interaction with 2...

Connected to service

    * List APIs: "help api list"
    * List Plugins: "help pi list"
    * Launch BASH: "shell"

Command> Command> shell

[*] Trying to find binary 'python' on the target machine
[-] Session manipulation failed: undefined method `include?' for nil:NilClass ["/root/metasploit-framework/lib/msf/core/session/provider/single_command_shell.rb:122:in `set_is_echo_shell'", "/root/metasploit-framework/lib/msf/core/session/provider/single_command_shell.rb:143:in `shell_command_token_base'", "/root/metasploit-framework/lib/msf/core/session/provider/single_command_shell.rb:130:in `shell_command_token_unix'", "/root/metasploit-framework/lib/msf/core/session/provider/single_command_shell.rb:91:in `shell_command_token'", "/root/metasploit-framework/lib/msf/base/sessions/command_shell.rb:392:in `block in binary_exists'", "/root/metasploit-framework/lib/msf/base/sessions/command_shell.rb:375:in `binary_exists'", "/root/metasploit-framework/lib/msf/base/sessions/command_shell.rb:391:in `binary_exists'", "/root/metasploit-framework/lib/msf/base/sessions/command_shell.rb:335:in `cmd_shell'", "/root/metasploit-framework/lib/msf/base/sessions/command_shell.rb:623:in `run_builtin_cmd'", "/root/metasploit-framework/lib/msf/base/sessions/command_shell.rb:611:in `run_single'", "/root/metasploit-framework/lib/msf/base/sessions/command_shell.rb:820:in `_interact_stream'", "/root/metasploit-framework/lib/msf/base/sessions/command_shell.rb:796:in `block in _interact'", "/root/metasploit-framework/lib/rex/ui/text/shell/history_manager.rb:35:in `with_context'", "/root/metasploit-framework/lib/msf/base/sessions/command_shell.rb:795:in `_interact'", "/root/metasploit-framework/lib/rex/ui/interactive.rb:53:in `interact'", "/root/metasploit-framework/lib/msf/ui/console/command_dispatcher/core.rb:1749:in `cmd_sessions'", "/root/metasploit-framework/lib/rex/ui/text/dispatcher_shell.rb:582:in `run_command'", "/root/metasploit-framework/lib/rex/ui/text/dispatcher_shell.rb:531:in `block in run_single'", "/root/metasploit-framework/lib/rex/ui/text/dispatcher_shell.rb:525:in `each'", "/root/metasploit-framework/lib/rex/ui/text/dispatcher_shell.rb:525:in `run_single'", "/root/metasploit-framework/lib/rex/ui/text/shell.rb:165:in `block in run'", "/root/metasploit-framework/lib/rex/ui/text/shell.rb:309:in `block in with_history_manager_context'", "/root/metasploit-framework/lib/rex/ui/text/shell/history_manager.rb:35:in `with_context'", "/root/metasploit-framework/lib/rex/ui/text/shell.rb:306:in `with_history_manager_context'", "/root/metasploit-framework/lib/rex/ui/text/shell.rb:133:in `run'", "/root/metasploit-framework/lib/metasploit/framework/command/console.rb:54:in `start'", "/root/metasploit-framework/lib/metasploit/framework/command/base.rb:82:in `start'", "./msfconsole:23:in `<main>'"]