push sheeet

pkgs/tools/security/metasploit/Gemfile

@@ -0,0 +1,6 @@
+# frozen_string_literal: true
+source "https://rubygems.org"
+
+gem "metasploit-framework", git: "https://github.com/rapid7/metasploit-framework", ref: "refs/tags/6.4.53"
+
+gem "syslog", "~> 0.3.0"

pkgs/tools/security/metasploit/Gemfile.lock

@@ -0,0 +1,503 @@
+GIT
+  remote: https://github.com/rapid7/metasploit-framework
+  revision: ce6990ff84c944186dfa104b3aa1edd98962b468
+  ref: refs/tags/6.4.53
+  specs:
+    metasploit-framework (6.4.53)
+      aarch64
+      abbrev
+      actionpack (~> 7.0.0)
+      activerecord (~> 7.0.0)
+      activesupport (~> 7.0.0)
+      aws-sdk-ec2
+      aws-sdk-ec2instanceconnect
+      aws-sdk-iam
+      aws-sdk-s3
+      aws-sdk-ssm
+      base64
+      bcrypt
+      bcrypt_pbkdf
+      benchmark
+      bigdecimal
+      bootsnap
+      bson
+      chunky_png
+      concurrent-ruby (= 1.3.4)
+      csv
+      dnsruby
+      drb
+      ed25519
+      elftools
+      em-http-request
+      eventmachine
+      faker
+      faraday (= 2.7.11)
+      faraday-retry
+      faye-websocket
+      ffi (< 1.17.0)
+      fiddle
+      filesize
+      getoptlong
+      hrr_rb_ssh-ed25519
+      http-cookie
+      irb (~> 1.7.4)
+      jsobfu
+      json
+      metasm
+      metasploit-concern
+      metasploit-credential
+      metasploit-model
+      metasploit-payloads (= 2.0.189)
+      metasploit_data_models
+      metasploit_payloads-mettle (= 1.0.35)
+      mqtt
+      msgpack (~> 1.6.0)
+      mutex_m
+      nessus_rest
+      net-imap
+      net-ldap
+      net-sftp
+      net-smtp
+      net-ssh
+      network_interface
+      nexpose
+      nokogiri
+      octokit (~> 4.0)
+      openssl-ccm
+      openvas-omp
+      ostruct
+      packetfu
+      patch_finder
+      pcaprub
+      pdf-reader
+      pg
+      puma
+      railties
+      rasn1 (= 0.14.0)
+      rb-readline
+      recog
+      redcarpet
+      reline
+      rex-arch
+      rex-bin_tools
+      rex-core
+      rex-encoder
+      rex-exploitation
+      rex-java
+      rex-mime
+      rex-nop
+      rex-ole
+      rex-powershell
+      rex-random_identifier
+      rex-registry
+      rex-rop_builder
+      rex-socket
+      rex-sslscan
+      rex-struct2
+      rex-text
+      rex-zip
+      ruby-macho
+      ruby-mysql
+      ruby_smb (~> 3.3.3)
+      rubyntlm
+      rubyzip
+      sinatra
+      sqlite3 (= 1.7.3)
+      sshkey
+      swagger-blocks
+      thin
+      tzinfo
+      tzinfo-data
+      unix-crypt
+      warden
+      win32api
+      windows_error
+      winrm
+      xdr
+      xmlrpc
+      zeitwerk
+
+GEM
+  remote: https://rubygems.org/
+  specs:
+    Ascii85 (1.1.1)
+    aarch64 (2.1.0)
+      racc (~> 1.6)
+    abbrev (0.1.2)
+    actionpack (7.0.8.6)
+      actionview (= 7.0.8.6)
+      activesupport (= 7.0.8.6)
+      rack (~> 2.0, >= 2.2.4)
+      rack-test (>= 0.6.3)
+      rails-dom-testing (~> 2.0)
+      rails-html-sanitizer (~> 1.0, >= 1.2.0)
+    actionview (7.0.8.6)
+      activesupport (= 7.0.8.6)
+      builder (~> 3.1)
+      erubi (~> 1.4)
+      rails-dom-testing (~> 2.0)
+      rails-html-sanitizer (~> 1.1, >= 1.2.0)
+    activemodel (7.0.8.6)
+      activesupport (= 7.0.8.6)
+    activerecord (7.0.8.6)
+      activemodel (= 7.0.8.6)
+      activesupport (= 7.0.8.6)
+    activesupport (7.0.8.6)
+      concurrent-ruby (~> 1.0, >= 1.0.2)
+      i18n (>= 1.6, < 2)
+      minitest (>= 5.1)
+      tzinfo (~> 2.0)
+    addressable (2.8.7)
+      public_suffix (>= 2.0.2, < 7.0)
+    afm (0.2.2)
+    arel-helpers (2.15.0)
+      activerecord (>= 3.1.0, < 8)
+    aws-eventstream (1.3.0)
+    aws-partitions (1.999.0)
+    aws-sdk-core (3.211.0)
+      aws-eventstream (~> 1, >= 1.3.0)
+      aws-partitions (~> 1, >= 1.992.0)
+      aws-sigv4 (~> 1.9)
+      jmespath (~> 1, >= 1.6.1)
+    aws-sdk-ec2 (1.486.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
+      aws-sigv4 (~> 1.5)
+    aws-sdk-ec2instanceconnect (1.52.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
+      aws-sigv4 (~> 1.5)
+    aws-sdk-iam (1.112.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
+      aws-sigv4 (~> 1.5)
+    aws-sdk-kms (1.95.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
+      aws-sigv4 (~> 1.5)
+    aws-sdk-s3 (1.169.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
+      aws-sdk-kms (~> 1)
+      aws-sigv4 (~> 1.5)
+    aws-sdk-ssm (1.183.0)
+      aws-sdk-core (~> 3, >= 3.210.0)
+      aws-sigv4 (~> 1.5)
+    aws-sigv4 (1.10.1)
+      aws-eventstream (~> 1, >= 1.0.2)
+    base64 (0.2.0)
+    bcrypt (3.1.20)
+    bcrypt_pbkdf (1.1.1)
+    benchmark (0.4.0)
+    bigdecimal (3.1.8)
+    bindata (2.4.15)
+    bootsnap (1.18.4)
+      msgpack (~> 1.2)
+    bson (5.0.1)
+    builder (3.3.0)
+    chunky_png (1.4.0)
+    concurrent-ruby (1.3.4)
+    cookiejar (0.3.4)
+    crass (1.0.6)
+    csv (3.3.0)
+    daemons (1.4.1)
+    date (3.3.4)
+    dnsruby (1.72.2)
+      simpleidn (~> 0.2.1)
+    domain_name (0.6.20240107)
+    drb (2.2.1)
+    ed25519 (1.3.0)
+    elftools (1.3.1)
+      bindata (~> 2)
+    em-http-request (1.1.7)
+      addressable (>= 2.3.4)
+      cookiejar (!= 0.3.1)
+      em-socksify (>= 0.3)
+      eventmachine (>= 1.0.3)
+      http_parser.rb (>= 0.6.0)
+    em-socksify (0.3.3)
+      base64
+      eventmachine (>= 1.0.0.beta.4)
+    erubi (1.13.0)
+    eventmachine (1.2.7)
+    faker (3.5.1)
+      i18n (>= 1.8.11, < 2)
+    faraday (2.7.11)
+      base64
+      faraday-net_http (>= 2.0, < 3.1)
+      ruby2_keywords (>= 0.0.4)
+    faraday-net_http (3.0.2)
+    faraday-retry (2.2.1)
+      faraday (~> 2.0)
+    faye-websocket (0.11.3)
+      eventmachine (>= 0.12.0)
+      websocket-driver (>= 0.5.1)
+    ffi (1.16.3)
+    fiddle (1.1.6)
+    filesize (0.2.0)
+    getoptlong (0.2.1)
+    gssapi (1.3.1)
+      ffi (>= 1.0.1)
+    gyoku (1.4.0)
+      builder (>= 2.1.2)
+      rexml (~> 3.0)
+    hashery (2.1.2)
+    hrr_rb_ssh (0.4.2)
+    hrr_rb_ssh-ed25519 (0.4.2)
+      ed25519 (~> 1.2)
+      hrr_rb_ssh (>= 0.4)
+    http-cookie (1.0.7)
+      domain_name (~> 0.5)
+    http_parser.rb (0.8.0)
+    httpclient (2.8.3)
+    i18n (1.14.6)
+      concurrent-ruby (~> 1.0)
+    io-console (0.7.2)
+    irb (1.7.4)
+      reline (>= 0.3.6)
+    jmespath (1.6.2)
+    jsobfu (0.4.2)
+      rkelly-remix
+    json (2.7.5)
+    little-plugger (1.1.4)
+    logger (1.6.6)
+    logging (2.4.0)
+      little-plugger (~> 1.1)
+      multi_json (~> 1.14)
+    loofah (2.23.1)
+      crass (~> 1.0.2)
+      nokogiri (>= 1.12.0)
+    metasm (1.0.5)
+    metasploit-concern (5.0.3)
+      activemodel (~> 7.0)
+      activesupport (~> 7.0)
+      railties (~> 7.0)
+      zeitwerk
+    metasploit-credential (6.0.11)
+      metasploit-concern
+      metasploit-model
+      metasploit_data_models (>= 5.0.0)
+      net-ssh
+      pg
+      railties
+      rex-socket
+      rubyntlm
+      rubyzip
+    metasploit-model (5.0.2)
+      activemodel (~> 7.0)
+      activesupport (~> 7.0)
+      railties (~> 7.0)
+    metasploit-payloads (2.0.189)
+    metasploit_data_models (6.0.5)
+      activerecord (~> 7.0)
+      activesupport (~> 7.0)
+      arel-helpers
+      metasploit-concern
+      metasploit-model (>= 3.1)
+      pg
+      railties (~> 7.0)
+      recog
+      webrick
+    metasploit_payloads-mettle (1.0.35)
+    method_source (1.1.0)
+    mini_portile2 (2.8.7)
+    minitest (5.25.1)
+    mqtt (0.6.0)
+    msgpack (1.6.1)
+    multi_json (1.15.0)
+    mustermann (3.0.3)
+      ruby2_keywords (~> 0.0.1)
+    mutex_m (0.2.0)
+    nessus_rest (0.1.6)
+    net-imap (0.5.0)
+      date
+      net-protocol
+    net-ldap (0.19.0)
+    net-protocol (0.2.2)
+      timeout
+    net-sftp (4.0.0)
+      net-ssh (>= 5.0.0, < 8.0.0)
+    net-smtp (0.5.0)
+      net-protocol
+    net-ssh (7.3.0)
+    network_interface (0.0.4)
+    nexpose (7.3.0)
+    nio4r (2.7.4)
+    nokogiri (1.16.7)
+      mini_portile2 (~> 2.8.2)
+      racc (~> 1.4)
+    nori (2.7.1)
+      bigdecimal
+    octokit (4.25.1)
+      faraday (>= 1, < 3)
+      sawyer (~> 0.9)
+    openssl-ccm (1.2.3)
+    openssl-cmac (2.0.2)
+    openvas-omp (0.0.4)
+    ostruct (0.6.1)
+    packetfu (2.0.0)
+      pcaprub (~> 0.13.1)
+    patch_finder (1.0.2)
+    pcaprub (0.13.3)
+    pdf-reader (2.12.0)
+      Ascii85 (~> 1.0)
+      afm (~> 0.2.1)
+      hashery (~> 2.0)
+      ruby-rc4
+      ttfunk
+    pg (1.5.9)
+    public_suffix (6.0.1)
+    puma (6.4.3)
+      nio4r (~> 2.0)
+    racc (1.8.1)
+    rack (2.2.10)
+    rack-protection (3.2.0)
+      base64 (>= 0.1.0)
+      rack (~> 2.2, >= 2.2.4)
+    rack-test (2.1.0)
+      rack (>= 1.3)
+    rails-dom-testing (2.2.0)
+      activesupport (>= 5.0.0)
+      minitest
+      nokogiri (>= 1.6)
+    rails-html-sanitizer (1.6.0)
+      loofah (~> 2.21)
+      nokogiri (~> 1.14)
+    railties (7.0.8.6)
+      actionpack (= 7.0.8.6)
+      activesupport (= 7.0.8.6)
+      method_source
+      rake (>= 12.2)
+      thor (~> 1.0)
+      zeitwerk (~> 2.5)
+    rake (13.2.1)
+    rasn1 (0.14.0)
+      strptime (~> 0.2.5)
+    rb-readline (0.5.5)
+    recog (3.1.11)
+      nokogiri
+    redcarpet (3.6.0)
+    reline (0.5.10)
+      io-console (~> 0.5)
+    rex-arch (0.1.16)
+      rex-text
+    rex-bin_tools (0.1.9)
+      metasm
+      rex-arch
+      rex-core
+      rex-struct2
+      rex-text
+    rex-core (0.1.32)
+    rex-encoder (0.1.7)
+      metasm
+      rex-arch
+      rex-text
+    rex-exploitation (0.1.40)
+      jsobfu
+      metasm
+      rex-arch
+      rex-encoder
+      rex-text
+      rexml
+    rex-java (0.1.7)
+    rex-mime (0.1.8)
+      rex-text
+    rex-nop (0.1.3)
+      rex-arch
+    rex-ole (0.1.8)
+      rex-text
+    rex-powershell (0.1.100)
+      rex-random_identifier
+      rex-text
+      ruby-rc4
+    rex-random_identifier (0.1.13)
+      rex-text
+    rex-registry (0.1.5)
+    rex-rop_builder (0.1.5)
+      metasm
+      rex-core
+      rex-text
+    rex-socket (0.1.57)
+      rex-core
+    rex-sslscan (0.1.10)
+      rex-core
+      rex-socket
+      rex-text
+    rex-struct2 (0.1.4)
+    rex-text (0.2.59)
+    rex-zip (0.1.5)
+      rex-text
+    rexml (3.3.9)
+    rkelly-remix (0.0.7)
+    ruby-macho (4.1.0)
+    ruby-mysql (4.1.0)
+    ruby-rc4 (0.1.5)
+    ruby2_keywords (0.0.5)
+    ruby_smb (3.3.11)
+      bindata (= 2.4.15)
+      openssl-ccm
+      openssl-cmac
+      rubyntlm (>= 0.6.5)
+      windows_error (>= 0.1.4)
+    rubyntlm (0.6.5)
+      base64
+    rubyzip (2.3.2)
+    sawyer (0.9.2)
+      addressable (>= 2.3.5)
+      faraday (>= 0.17.3, < 3)
+    simpleidn (0.2.3)
+    sinatra (3.2.0)
+      mustermann (~> 3.0)
+      rack (~> 2.2, >= 2.2.4)
+      rack-protection (= 3.2.0)
+      tilt (~> 2.0)
+    sqlite3 (1.7.3)
+      mini_portile2 (~> 2.8.0)
+    sshkey (3.0.0)
+    strptime (0.2.5)
+    swagger-blocks (3.0.0)
+    syslog (0.3.0)
+      logger
+    thin (1.8.2)
+      daemons (~> 1.0, >= 1.0.9)
+      eventmachine (~> 1.0, >= 1.0.4)
+      rack (>= 1, < 3)
+    thor (1.3.2)
+    tilt (2.4.0)
+    timeout (0.4.1)
+    ttfunk (1.8.0)
+      bigdecimal (~> 3.1)
+    tzinfo (2.0.6)
+      concurrent-ruby (~> 1.0)
+    tzinfo-data (1.2024.2)
+      tzinfo (>= 1.0.0)
+    unix-crypt (1.3.1)
+    warden (1.2.9)
+      rack (>= 2.0.9)
+    webrick (1.8.2)
+    websocket-driver (0.7.6)
+      websocket-extensions (>= 0.1.0)
+    websocket-extensions (0.1.5)
+    win32api (0.1.0)
+    windows_error (0.1.5)
+    winrm (2.3.9)
+      builder (>= 2.1.2)
+      erubi (~> 1.8)
+      gssapi (~> 1.2)
+      gyoku (~> 1.0)
+      httpclient (~> 2.2, >= 2.2.0.2)
+      logging (>= 1.6.1, < 3.0)
+      nori (~> 2.0, >= 2.7.1)
+      rexml (~> 3.0)
+      rubyntlm (~> 0.6.0, >= 0.6.3)
+    xdr (3.0.3)
+      activemodel (>= 4.2, < 8.0)
+      activesupport (>= 4.2, < 8.0)
+    xmlrpc (0.3.3)
+      webrick
+    zeitwerk (2.6.18)
+
+PLATFORMS
+  ruby
+
+DEPENDENCIES
+  metasploit-framework!
+  syslog (~> 0.3.0)
+
+BUNDLED WITH
+   2.5.22

pkgs/tools/security/metasploit/default.nix

@@ -0,0 +1,87 @@
+{
+  lib,
+  stdenv,
+  fetchFromGitHub,
+  makeWrapper,
+  ruby,
+  bundlerEnv,
+  testers,
+  python3,
+}:
+
+let
+  env = bundlerEnv {
+    inherit ruby;
+    name = "metasploit-bundler-env";
+    gemdir = ./.;
+  };
+in
+stdenv.mkDerivation (finalAttrs: {
+  pname = "metasploit-framework";
+  version = "6.4.53";
+
+  src = fetchFromGitHub {
+    owner = "rapid7";
+    repo = "metasploit-framework";
+    tag = finalAttrs.version;
+    hash = "sha256-yHat9U8EZbUWo4j9ut6K9IPtPFm130pfSmIuhtQhFoQ=";
+  };
+
+  nativeBuildInputs = [
+    makeWrapper
+  ];
+
+  buildInputs = [
+    (python3.withPackages (ps: [ ps.requests ]))
+  ];
+
+  dontPatchELF = true; # stay away from exploit executables
+
+  installPhase = ''
+    runHook preInstall
+
+    mkdir -p $out/{bin,share/msf}
+
+    cp -r * $out/share/msf
+
+    grep -rl "^#\!.*python2$" $out/share/msf | xargs -d '\n' rm
+
+    (
+      cd $out/share/msf/
+      for i in msf*; do
+        makeWrapper ${env}/bin/bundle $out/bin/$i \
+          --add-flags "exec ${ruby}/bin/ruby $out/share/msf/$i"
+      done
+    )
+
+    makeWrapper ${env}/bin/bundle $out/bin/msf-pattern_create \
+      --add-flags "exec ${ruby}/bin/ruby $out/share/msf/tools/exploit/pattern_create.rb"
+
+    makeWrapper ${env}/bin/bundle $out/bin/msf-pattern_offset \
+      --add-flags "exec ${ruby}/bin/ruby $out/share/msf/tools/exploit/pattern_offset.rb"
+
+    runHook postInstall
+  '';
+
+  passthru.tests = {
+    msfconsole-version = testers.testVersion {
+      package = finalAttrs.finalPackage;
+      command = "HOME=/tmp msfconsole -q -x 'version;exit'";
+    };
+  };
+
+  # run with: nix-shell maintainers/scripts/update.nix --argstr path metasploit
+  passthru.updateScript = ./update.sh;
+
+  meta = with lib; {
+    description = "Metasploit Framework - a collection of exploits";
+    homepage = "https://docs.metasploit.com/";
+    platforms = platforms.unix;
+    license = licenses.bsd3;
+    maintainers = with maintainers; [
+      fab
+      makefu
+    ];
+    mainProgram = "msfconsole";
+  };
+})

pkgs/tools/security/metasploit/shell.nix

@@ -0,0 +1,25 @@
+{
+  pkgs ? import ../../../.. { },
+}:
+pkgs.mkShell {
+  nativeBuildInputs = [
+    pkgs.pkg-config
+    pkgs.libffi # libffi as native input
+  ];
+  buildInputs = with pkgs; [
+    bundix
+    git
+    libiconv
+    libpcap
+    libxml2
+    libxslt
+    postgresql
+    ruby.devEnv
+    sqlite
+  ];
+  # Ensure that pkg-config finds libffi
+  shellHook = ''
+    export PKG_CONFIG_PATH="${pkgs.libffi.out}/lib/pkgconfig:$PKG_CONFIG_PATH"
+    echo "PKG_CONFIG_PATH set to: $PKG_CONFIG_PATH"
+  '';
+}

pkgs/tools/security/metasploit/update.sh

@@ -0,0 +1,20 @@
+#!/usr/bin/env nix-shell
+#!nix-shell -i bash -p curl bundix git libiconv libpcap libxml2 libxslt pkg-config postgresql ruby.devEnv sqlite xmlstarlet nix-update
+
+set -eu -o pipefail
+cd "$(dirname "$(readlink -f "$0")")"
+
+latest=$(curl https://github.com/rapid7/metasploit-framework/tags.atom | xmlstarlet sel -N atom="http://www.w3.org/2005/Atom" -t -m /atom:feed/atom:entry -v atom:title -n | head -n1)
+echo "Updating metasploit to $latest"
+
+sed -i "s#refs/tags/.*#refs/tags/$latest\"#" Gemfile
+
+bundler install
+bundix
+sed -i '/[ ]*dependencies =/d' gemset.nix
+
+# Hacks
+sed -i 's/nokogiri = {/nokogiri = {\n    dependencies = ["mini_portile2" "racc"];/g' gemset.nix
+
+cd "../../../../"
+nix-update metasploit --version "$latest"