diff --git a/gadgetchains/Monolog/FW/1/chain.php b/gadgetchains/Monolog/FW/1/chain.php index a7521fad..f863920c 100644 --- a/gadgetchains/Monolog/FW/1/chain.php +++ b/gadgetchains/Monolog/FW/1/chain.php @@ -4,10 +4,10 @@ class FW1 extends \PHPGGC\GadgetChain\FileWrite { - public static $version = '3.0.0 <= 3.1.0+'; + public static $version = '3.0.0 <= 3.11.0+'; public static $vector = '__destruct'; public static $author = 'mir-hossein (Mirhossein Rahmani)'; - public static $information = 'Please use this GC only for educational purposes or legal pentest, Thank you!'; + public static $information = 'Please use this GC only for educational purposes or legal penetration testing. Thank you!'; public function generate(array $parameters) { diff --git a/gadgetchains/Monolog/RCE/1/chain.php b/gadgetchains/Monolog/RCE/1/chain.php index ae161e1f..687bd015 100644 --- a/gadgetchains/Monolog/RCE/1/chain.php +++ b/gadgetchains/Monolog/RCE/1/chain.php @@ -4,7 +4,7 @@ class RCE1 extends \PHPGGC\GadgetChain\RCE\FunctionCall { - public static $version = '1.4.1 <= 1.6.0 1.17.2 <= 2.7.0+'; + public static $version = '1.4.1 <= 1.6.0 1.17.2 <= 2.11.1+'; public static $vector = '__destruct'; public static $author = 'cfreal'; diff --git a/gadgetchains/Monolog/RCE/2/chain.php b/gadgetchains/Monolog/RCE/2/chain.php index e5d1951a..c1a85ba8 100644 --- a/gadgetchains/Monolog/RCE/2/chain.php +++ b/gadgetchains/Monolog/RCE/2/chain.php @@ -4,7 +4,7 @@ class RCE2 extends \PHPGGC\GadgetChain\RCE\FunctionCall { - public static $version = '1.4.1 <= 2.7.0+'; + public static $version = '1.4.1 <= 2.11.1+'; public static $vector = '__destruct'; public static $author = 'cfreal'; diff --git a/gadgetchains/Monolog/RCE/5/chain.php b/gadgetchains/Monolog/RCE/5/chain.php index 6e4911b1..fcffe49e 100644 --- a/gadgetchains/Monolog/RCE/5/chain.php +++ b/gadgetchains/Monolog/RCE/5/chain.php @@ -4,7 +4,7 @@ class RCE5 extends \PHPGGC\GadgetChain\RCE\FunctionCall { - public static $version = '1.25 <= 2.7.0+'; + public static $version = '1.25 <= 2.11.1+'; public static $vector = '__destruct'; public static $author = 'mayfly'; diff --git a/gadgetchains/Monolog/RCE/6/chain.php b/gadgetchains/Monolog/RCE/6/chain.php index ecd7a8ea..8bee09a7 100644 --- a/gadgetchains/Monolog/RCE/6/chain.php +++ b/gadgetchains/Monolog/RCE/6/chain.php @@ -4,7 +4,7 @@ class RCE6 extends \PHPGGC\GadgetChain\RCE\FunctionCall { - public static $version = '1.10.0 <= 2.7.0+'; + public static $version = '1.10.0 <= 2.11.1+'; public static $vector = '__destruct'; public static $author = 'mayfly'; diff --git a/gadgetchains/Monolog/RCE/7/chain.php b/gadgetchains/Monolog/RCE/7/chain.php index ba9a78c9..2eed1ff6 100644 --- a/gadgetchains/Monolog/RCE/7/chain.php +++ b/gadgetchains/Monolog/RCE/7/chain.php @@ -4,10 +4,10 @@ class RCE7 extends \PHPGGC\GadgetChain\RCE\FunctionCall { - public static $version = '1.10.0 <= 2.7.0+'; + public static $version = '1.10.0 <= 2.11.1+'; public static $vector = '__destruct'; - public static $author = 'mir-hossein'; - public static $information = 'Please use this exploit only for educational purposes or legal pentest, thank you!'; + public static $author = 'mir-hossein (Mirhossein Rahmani)'; + public static $information = 'Please use this GC only for educational purposes or legal penetration testing. Thank you!'; public function generate(array $parameters) { diff --git a/gadgetchains/Monolog/RCE/8/chain.php b/gadgetchains/Monolog/RCE/8/chain.php index eed2e663..83011a9a 100644 --- a/gadgetchains/Monolog/RCE/8/chain.php +++ b/gadgetchains/Monolog/RCE/8/chain.php @@ -4,10 +4,10 @@ class RCE8 extends \PHPGGC\GadgetChain\RCE\FunctionCall { - public static $version = '3.0.0 <= 3.1.0+'; + public static $version = '3.0.0 <= 3.11.0+'; public static $vector = '__destruct'; public static $author = 'cf (Charles Fol), mir-hossein (Mirhossein Rahmani)'; - public static $information = 'Please use this exploit only for educational purposes or legal pentest, Thank you!'; + public static $information = 'Please use this GC only for educational purposes or legal penetration testing. Thank you!'; public function generate(array $parameters) { diff --git a/gadgetchains/Monolog/RCE/8/gadgets.php b/gadgetchains/Monolog/RCE/8/gadgets.php index c2270704..4d91eaf6 100644 --- a/gadgetchains/Monolog/RCE/8/gadgets.php +++ b/gadgetchains/Monolog/RCE/8/gadgets.php @@ -15,7 +15,7 @@ class LogRecord function __construct($parameter) { $this->level = \Monolog\Level::Debug; - $this->mixed = $parameter; + $this->formatted = $parameter; } } } diff --git a/gadgetchains/Monolog/RCE/9/chain.php b/gadgetchains/Monolog/RCE/9/chain.php index 747470f1..7ec4e70a 100644 --- a/gadgetchains/Monolog/RCE/9/chain.php +++ b/gadgetchains/Monolog/RCE/9/chain.php @@ -4,10 +4,10 @@ class RCE9 extends \PHPGGC\GadgetChain\RCE\FunctionCall { - public static $version = '3.0.0 <= 3.1.0+'; + public static $version = '3.0.0 <= 3.11.0+'; public static $vector = '__destruct'; public static $author = 'mir-hossein (Mirhossein Rahmani)'; - public static $information = 'Please use this exploit only for educational purposes or legal pentest, Thank you!'; + public static $information = 'Please use this GC only for educational purposes or legal penetration testing. Thank you!'; public function generate(array $parameters) { diff --git a/gadgetchains/Monolog/RCE/9/gadgets.php b/gadgetchains/Monolog/RCE/9/gadgets.php index f589b195..f3b12270 100644 --- a/gadgetchains/Monolog/RCE/9/gadgets.php +++ b/gadgetchains/Monolog/RCE/9/gadgets.php @@ -32,7 +32,7 @@ class LogRecord function __construct($parameter) { - $this->mixed = $parameter; + $this->formatted = $parameter; } } } \ No newline at end of file diff --git a/lib/PHPGGC/GadgetChain/RCE.php b/lib/PHPGGC/GadgetChain/RCE.php index 303ccbb0..ea7c8767 100644 --- a/lib/PHPGGC/GadgetChain/RCE.php +++ b/lib/PHPGGC/GadgetChain/RCE.php @@ -11,6 +11,9 @@ abstract class RCE extends \PHPGGC\GadgetChain # TBD by subclasses public static $parameters = []; + public $__test_rand_token; + public $__test_rand_path; + /** * The result of the command is not necessarily visible. We write the output * to a file instead to be able to tell if the payload worked, even if @@ -39,4 +42,4 @@ public function test_cleanup($arguments) if(file_exists($this->__test_rand_path)) unlink($this->__test_rand_path); } -} \ No newline at end of file +}