diff --git a/gadgetchains/Monolog/FW/1/chain.php b/gadgetchains/Monolog/FW/1/chain.php index a7521fad..92768bbb 100644 --- a/gadgetchains/Monolog/FW/1/chain.php +++ b/gadgetchains/Monolog/FW/1/chain.php @@ -4,10 +4,10 @@ class FW1 extends \PHPGGC\GadgetChain\FileWrite { - public static $version = '3.0.0 <= 3.1.0+'; + public static $version = '3.0.0 <= 3.9.0+'; public static $vector = '__destruct'; public static $author = 'mir-hossein (Mirhossein Rahmani)'; - public static $information = 'Please use this GC only for educational purposes or legal pentest, Thank you!'; + public static $information = 'Please use this GC only for educational purposes or legal penetration testing. Thank you!'; public function generate(array $parameters) { diff --git a/gadgetchains/Monolog/RCE/1/chain.php b/gadgetchains/Monolog/RCE/1/chain.php index ae161e1f..259b83f9 100644 --- a/gadgetchains/Monolog/RCE/1/chain.php +++ b/gadgetchains/Monolog/RCE/1/chain.php @@ -4,7 +4,7 @@ class RCE1 extends \PHPGGC\GadgetChain\RCE\FunctionCall { - public static $version = '1.4.1 <= 1.6.0 1.17.2 <= 2.7.0+'; + public static $version = '1.4.1 <= 1.6.0 1.17.2 <= 2.10.0+'; public static $vector = '__destruct'; public static $author = 'cfreal'; diff --git a/gadgetchains/Monolog/RCE/2/chain.php b/gadgetchains/Monolog/RCE/2/chain.php index e5d1951a..32474484 100644 --- a/gadgetchains/Monolog/RCE/2/chain.php +++ b/gadgetchains/Monolog/RCE/2/chain.php @@ -4,7 +4,7 @@ class RCE2 extends \PHPGGC\GadgetChain\RCE\FunctionCall { - public static $version = '1.4.1 <= 2.7.0+'; + public static $version = '1.4.1 <= 2.10.0+'; public static $vector = '__destruct'; public static $author = 'cfreal'; diff --git a/gadgetchains/Monolog/RCE/5/chain.php b/gadgetchains/Monolog/RCE/5/chain.php index 6e4911b1..f414f6dd 100644 --- a/gadgetchains/Monolog/RCE/5/chain.php +++ b/gadgetchains/Monolog/RCE/5/chain.php @@ -4,7 +4,7 @@ class RCE5 extends \PHPGGC\GadgetChain\RCE\FunctionCall { - public static $version = '1.25 <= 2.7.0+'; + public static $version = '1.25 <= 2.10.0+'; public static $vector = '__destruct'; public static $author = 'mayfly'; diff --git a/gadgetchains/Monolog/RCE/6/chain.php b/gadgetchains/Monolog/RCE/6/chain.php index ecd7a8ea..4ba200ac 100644 --- a/gadgetchains/Monolog/RCE/6/chain.php +++ b/gadgetchains/Monolog/RCE/6/chain.php @@ -4,7 +4,7 @@ class RCE6 extends \PHPGGC\GadgetChain\RCE\FunctionCall { - public static $version = '1.10.0 <= 2.7.0+'; + public static $version = '1.10.0 <= 2.10.0+'; public static $vector = '__destruct'; public static $author = 'mayfly'; diff --git a/gadgetchains/Monolog/RCE/7/chain.php b/gadgetchains/Monolog/RCE/7/chain.php index ba9a78c9..63269277 100644 --- a/gadgetchains/Monolog/RCE/7/chain.php +++ b/gadgetchains/Monolog/RCE/7/chain.php @@ -4,10 +4,10 @@ class RCE7 extends \PHPGGC\GadgetChain\RCE\FunctionCall { - public static $version = '1.10.0 <= 2.7.0+'; + public static $version = '1.10.0 <= 2.10.0+'; public static $vector = '__destruct'; - public static $author = 'mir-hossein'; - public static $information = 'Please use this exploit only for educational purposes or legal pentest, thank you!'; + public static $author = 'mir-hossein (Mirhossein Rahmani)'; + public static $information = 'Please use this GC only for educational purposes or legal penetration testing. Thank you!'; public function generate(array $parameters) { diff --git a/gadgetchains/Monolog/RCE/8/chain.php b/gadgetchains/Monolog/RCE/8/chain.php index eed2e663..62ce56cc 100644 --- a/gadgetchains/Monolog/RCE/8/chain.php +++ b/gadgetchains/Monolog/RCE/8/chain.php @@ -4,10 +4,10 @@ class RCE8 extends \PHPGGC\GadgetChain\RCE\FunctionCall { - public static $version = '3.0.0 <= 3.1.0+'; + public static $version = '3.0.0 <= 3.9.0+'; public static $vector = '__destruct'; public static $author = 'cf (Charles Fol), mir-hossein (Mirhossein Rahmani)'; - public static $information = 'Please use this exploit only for educational purposes or legal pentest, Thank you!'; + public static $information = 'Please use this GC only for educational purposes or legal penetration testing. Thank you!'; public function generate(array $parameters) { diff --git a/gadgetchains/Monolog/RCE/8/gadgets.php b/gadgetchains/Monolog/RCE/8/gadgets.php index c2270704..4d91eaf6 100644 --- a/gadgetchains/Monolog/RCE/8/gadgets.php +++ b/gadgetchains/Monolog/RCE/8/gadgets.php @@ -15,7 +15,7 @@ class LogRecord function __construct($parameter) { $this->level = \Monolog\Level::Debug; - $this->mixed = $parameter; + $this->formatted = $parameter; } } } diff --git a/gadgetchains/Monolog/RCE/9/chain.php b/gadgetchains/Monolog/RCE/9/chain.php index 747470f1..c15a72c7 100644 --- a/gadgetchains/Monolog/RCE/9/chain.php +++ b/gadgetchains/Monolog/RCE/9/chain.php @@ -4,10 +4,10 @@ class RCE9 extends \PHPGGC\GadgetChain\RCE\FunctionCall { - public static $version = '3.0.0 <= 3.1.0+'; + public static $version = '3.0.0 <= 3.9.0+'; public static $vector = '__destruct'; public static $author = 'mir-hossein (Mirhossein Rahmani)'; - public static $information = 'Please use this exploit only for educational purposes or legal pentest, Thank you!'; + public static $information = 'Please use this GC only for educational purposes or legal penetration testing. Thank you!'; public function generate(array $parameters) { diff --git a/gadgetchains/Monolog/RCE/9/gadgets.php b/gadgetchains/Monolog/RCE/9/gadgets.php index f589b195..f3b12270 100644 --- a/gadgetchains/Monolog/RCE/9/gadgets.php +++ b/gadgetchains/Monolog/RCE/9/gadgets.php @@ -32,7 +32,7 @@ class LogRecord function __construct($parameter) { - $this->mixed = $parameter; + $this->formatted = $parameter; } } } \ No newline at end of file diff --git a/lib/PHPGGC/GadgetChain/RCE.php b/lib/PHPGGC/GadgetChain/RCE.php index 303ccbb0..ea7c8767 100644 --- a/lib/PHPGGC/GadgetChain/RCE.php +++ b/lib/PHPGGC/GadgetChain/RCE.php @@ -11,6 +11,9 @@ abstract class RCE extends \PHPGGC\GadgetChain # TBD by subclasses public static $parameters = []; + public $__test_rand_token; + public $__test_rand_path; + /** * The result of the command is not necessarily visible. We write the output * to a file instead to be able to tell if the payload worked, even if @@ -39,4 +42,4 @@ public function test_cleanup($arguments) if(file_exists($this->__test_rand_path)) unlink($this->__test_rand_path); } -} \ No newline at end of file +}