metasploit-framework
metasploit-framework copied to clipboard
Update show options to be case insensitive
Steps to reproduce
Use the ldap_query module and set the action to lowercase run_query_file, and note that the module action doesn't appear:
msf6 auxiliary(gather/ldap_query) > set action run_query_file
action => run_query_file
msf6 auxiliary(gather/ldap_query) > show options
Module options (auxiliary/gather/ldap_query):
Name Current Setting Required Description
---- --------------- -------- -----------
BASE_DN no LDAP base DN if you already have it
BIND_DN no The username to authenticate to LDAP server
BIND_PW no Password for the BIND_DN
OUTPUT_FORMAT table yes The output format to use (Accepted: csv, table, json)
RHOSTS 127.0.0.1 yes The target host(s), see https://github.com/rapid7/metasploit-framework/wiki/Using-Metasploit
RPORT 389 yes The target port
SSL false no Enable SSL on the LDAP connection
View the full module info with the info, or info -d command.
Now use the ldap_query module and set the action to uppercase RUN_QUERY_FILE, and note that the module action does appear:
msf6 auxiliary(gather/ldap_query) > set action RUN_QUERY_FILE
action => RUN_QUERY_FILE
msf6 auxiliary(gather/ldap_query) > show options
Module options (auxiliary/gather/ldap_query):
Name Current Setting Required Description
---- --------------- -------- -----------
BASE_DN no LDAP base DN if you already have it
BIND_DN no The username to authenticate to LDAP server
BIND_PW no Password for the BIND_DN
OUTPUT_FORMAT table yes The output format to use (Accepted: csv, table, json)
QUERY_FILE_PATH yes Path to the JSON or YAML file to load and run queries from
RHOSTS 127.0.0.1 yes The target host(s), see https://github.com/rapid7/metasploit-framework/wiki/Using-Metasploit
RPORT 389 yes The target port
SSL false no Enable SSL on the LDAP connection
Auxiliary action:
Name Description
---- -----------
RUN_QUERY_FILE Execute a custom set of LDAP queries from the JSON or YAML file specified by QUERY_FILE.
Expected behavior
show options should be case insensitive when showing the selected action
Current behavior
The action does not appear
Metasploit version
msf6 auxiliary(gather/ldap_query) > version
Framework: 6.2.32-dev-281020379c
Console : 6.2.32-dev-281020379c
I want to grab this :P
Unassigning, user does not seem to have forked the Metasploit Framework repo and so I think this task may have been abandoned.
I want to grab this issue.
Resolved with https://github.com/rapid7/metasploit-framework/pull/17663 which has now been landed.