Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Make the EICAR canary useful again #14475

Merged

Conversation

dwelch-r7
Copy link
Contributor

@dwelch-r7 dwelch-r7 commented Dec 9, 2020

Resolves #14415

Refactor of where and when the EICAR canary is checked

Verification

  • Delete the data/eicar.com file
  • Startup framework (with and without the quiet flag -q)
  • Observe the EICAR warning

You may also delete the /gems/metasploit-payloads-2.0.24/data/android/apk/classes.dex file which was mentioned in the issue and framework should no longer break due to the load order differences meaning the AV warning will always be displayed first

@dwelch-r7 dwelch-r7 added the bug label Dec 9, 2020
Copy link
Contributor

@acammack-r7 acammack-r7 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks! It'll be nice to have this working again.

lib/msf/core/framework.rb Outdated Show resolved Hide resolved
lib/msf/ui/console/driver.rb Outdated Show resolved Hide resolved
@cgranleese-r7 cgranleese-r7 self-assigned this Dec 18, 2020
@cgranleese-r7
Copy link
Contributor

Tested this and everything seems to work as expected 👍

Before:
image

After:
image

@cgranleese-r7 cgranleese-r7 merged commit f76d1ac into rapid7:master Dec 18, 2020
@dwelch-r7 dwelch-r7 deleted the issue-14415-make-eicar-canary-useful branch December 18, 2020 11:35
@dwelch-r7
Copy link
Contributor Author

dwelch-r7 commented Dec 18, 2020

Release Notes

Fixed a bug where the EICAR canary would be checked too late to be useful.

@gwillcox-r7 gwillcox-r7 added the rn-fix release notes fix label Dec 21, 2020
@adfoster-r7 adfoster-r7 added rn-fix release notes fix and removed rn-fix release notes fix labels Jan 9, 2021
@rapid7 rapid7 deleted a comment from dwelch-r7 Jan 16, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug rn-fix release notes fix
Projects
None yet
Development

Successfully merging this pull request may close these issues.

msfconsole ignores EICAR canary until long after its useful
6 participants