add ndkstager to data/exploits

rapid7 · Oct 5, 2018 · 4a4c759 · 4a4c759
1 parent dbfe675
commit 4a4c759
Show file tree

Hide file tree

Showing 4 changed files with 2 additions and 1 deletion.
diff --git a/data/exploits/CVE-2012-6636/armeabi/libndkstager.so b/data/exploits/CVE-2012-6636/armeabi/libndkstager.so
diff --git a/data/exploits/CVE-2012-6636/mips/libndkstager.so b/data/exploits/CVE-2012-6636/mips/libndkstager.so
diff --git a/data/exploits/CVE-2012-6636/x86/libndkstager.so b/data/exploits/CVE-2012-6636/x86/libndkstager.so
diff --git a/lib/msf/core/exploit/android.rb b/lib/msf/core/exploit/android.rb
@@ -114,7 +114,8 @@ def linux_exe_js(arch)
 
   # The NDK stager is used to launch a hidden APK
   def ndkstager(stagename, arch)
-    data = MetasploitPayloads.read('android', 'libs', NDK_FILES[arch] || arch, 'libndkstager.so')
+    stager_file = File.join( Msf::Config.data_directory, "exploits", "CVE-2012-6636", NDK_FILES[arch] || arch, 'libndkstager.so')
+    data = File.read(stager_file, {:mode => 'rb'})
     data.gsub!('PLOAD', stagename)
   end