Skip to content

v0.4.5 - "pop Drop"

Choose a tag to compare

View all tags
@s-b-repo s-b-repo released this 26 Jan 09:18
· 1 commit to main since this release
v0.4.5
ac53285

v0.4.5 - "Apocalypse Code Drop"

Release Date: January 25, 2026
Tagline: Because why fix the world when you can exploit it? We've patched our own chaos, added more ways to break stuff, and made sure your prompts don't hang like a noose. Buckle up, script kiddies – this one's got teeth.

Yo, digital renegades and basement dwellers. While the corps are busy patching their firewalls, we've been brewing a toxic cocktail of exploits and fixes in the shadows. v0.4.5 isn't just an update; it's a middle finger to stability. We've nuked hangs, injected fresh venom into modules, and overhauled the backend to handle your wildest "fire-and-forget" fantasies. If you're here for polite changelogs, GTFO – this is raw, unfiltered anarchy in code form.

Fresh Blood: New Exploits & Modules

We've expanded our arsenal with modules that'd make even the NSA blush. Trend Micro? TP-Link? Ruijie? Consider them owned. Here's the hit list:

  • Trend Micro Apex Central Carnage:

    • CVE-2025-5777: RCE via ping checks and arbitrary commands. Because who doesn't love a good shell party?
    • CVE-2025-69258: Load malicious DLLs over SMB. Your target's MsgReceiver.exe is now your puppet.
    • CVE-2025-69259 & CVE-2025-69260: DoS attacks that crash services harder than a bad acid trip. Null returns and OOB reads for the win.

  • TP-Link Takedown Squad:

    • tapo_c200_vulns.rs: Raw TLS DoS (CVE-2025-14299) with bogus Content-Length to bypass norms.
    • tplink_wdr842n_configure_disclosure.rs: Config leaks with DES decryption – now with bounds checks to avoid self-sabotage.
    • tplink_wdr740n_path_traversal.rs: %2e%2e encoded chaos for path traversal bliss.
    • tplink_archer_c2_c20i_rce.rs: Straight-up RCE. No notes.

  • Ruijie Router Rampage (All 7 modules renamed for max edginess):

    • ruijie_rsr_router_ci_cve_2024_31616.rs: Command injection on RG-RSR.
    • ruijie_auth_bypass_rce_cve_2023_34644.rs: Bypass auth and drop RCE on RG-EW/NBS/S1930.
    • ruijie_rg_uac_ci_cve_2024_4508.rs: Unauth CI on RG-UAC.
    • ruijie_rg_ew_update_version_rce_cve_2021_43164.rs: RCE via updates on RG-EW series.
    • ruijie_reyee_ssrf_cve_2024_48874.rs: SSRF to probe the dark web from inside.
    • ruijie_rg_ew_login_bypass_cve_2023_4415.rs & ruijie_rg_ew_password_reset_cve_2023_4169.rs: Login bypass and pw reset exploits. Doors? What doors?

  • Bluetooth Badassery: wpair.rs – Fast Pair exploits with 4 strategies (RawKbp, RawWithSeeker, Retroactive, ExtendedResponse). AES-128 ECB crypto for that sweet shared secret. (Pro tip: Install libdbus-1-dev or GTFO – sudo apt install libdbus-1-dev pkg-config.)

  • Polymorph 3-Stage Dropper: polymorph_dropper.rs – Delayed execution with PowerShell time calcs and schtasks. Sneaky as hell, now with fixed logic.

  • MQTT Bruteforce Overhaul: Rewritten from 323 to 464 lines of pure malice. Anonymous auth detection, auto-TLS on 8883, progress tracking, and structured results. Because brute-forcing should feel like a boss fight.

  • 87+ Modules Across Categories: Creds, exploits, scanners. All load without barfing. Verified: sshpwn_session, react2shell, fortiweb_sqli_rce, port_scanner, and more.

Fixes: We Stopped the Bleeding (Mostly)

No more hanging prompts – we ditched tokio::io for std::io in sync spots. Affected 20+ modules across scanners (ssh_login, telnet_bruteforce), exploits (sshpwn_*, telnet_auth_bypass, palo_alto, jenkins, flowise, react, apache_tomcat, ftp, avtech, payloadgens), and more. Interactive shells? Still async where it counts.

  • Prompt Hell Resolved: Converted async prompts to sync in 19 files. No more .await on your grandma's I/O.
  • Import & Warning Purge: Nuked unused vars, dupes, and dead code in polymorph_dropper, wpair, tapo_c200_vulns, qnap_qts_rce, netgear_r6700v3.
  • Hardening Mode: Replaced .unwrap() with proper errors in 14+ modules (rtsp, snmp, telnet, mongobleed, hikvision, nginx_pwner). No more panics – just graceful fails.
  • CLI Shenanigans: Fixed invalid flags (e.g., -m without -t), added colored warnings. Now with --verbose for log spam.

Other quick kills: Fixed time calc in polymorph_dropper, UUID constants in wpair, bounds in tplink_wdr842n, and a logic regression in snmp_bruteforce.

Overhauls & Power-Ups

  • CLI, API, & Job Queue Revolution: Fire-and-forget jobs with mpsc channels. Configurable queue (--queue-size 100) and workers (--workers 10). API returns 202 Accepted or 503 if full. New endpoints: /api/validate, /api/module/:category/:name. Tracked requests with IDs, timestamps, durations. Structured errors (ApiErrorCode: AuthFailed, RateLimited, etc.).
  • Verbose Flag: --verbose for detailed logs in CLI/API/Shell. Because silence is for the weak.
  • Output Flex: --output-format <text|json> for your parsing pleasure.
  • List 'Em All: --list-modules to peek without diving in.
  • Docker Domination: Updated setup_docker.py for queue/workers prompts. CLI args (--non-interactive, --queue-size, --workers). Env vars in .env and entrypoint.sh. Validated hosts and API keys.
  • Deps Bump: sysinfo 0.37→0.38, suppaftp 7.1→8.0. No breakage, all green.

Docs & Walkthroughs

  • README.md: Added dbus deps, system reqs.
  • walkthrough.md: Polymorph dropper deets.
  • changelogs/changelog-latest.md: Appended all this glory.
  • Updated for new flags, endpoints, queue configs.

⚠Disclaimer

This ain't for heroes. Use at your own peril – we're not your babysitter. Root required for Bluetooth? Deal with it. Missing deps? Install 'em or cry. Verified with cargo check/build/run – zero errors, zero warnings.

Shoutout to the void: 87 modules, infinite chaos. Pull, build, exploit. If it breaks, you probably deserved it.

Download: Binaries in releases. Source? Fork it.
Issues? Open one – we'll laugh, then maybe fix.

What's Changed

Full Changelog: v0.4.4...v0.4.5

Contributors

s-b-repo
Assets 2
Loading