diff --git a/content/posts/commits/2026-03-18-commit-b93e503.md b/content/posts/commits/2026-03-18-commit-b93e503.md new file mode 100644 index 0000000..2a3262f --- /dev/null +++ b/content/posts/commits/2026-03-18-commit-b93e503.md @@ -0,0 +1,46 @@ +--- +title: "[bojemoi] feat(borodino/uzi): auto-detect LHOST, split LPORT_BIND, improve exploit targeting" +date: 2026-03-18T13:52:08+01:00 +draft: false +tags: ["commit", "bojemoi", "main"] +categories: ["Git Activity"] +summary: "Commit b93e503 par Betty dans bojemoi" +author: "Betty" +--- + +## Commit `b93e503` + +| | | +|---|---| +| **Repository** | bojemoi | +| **Branch** | `main` | +| **Author** | Betty | +| **Hash** | `b93e503aa9dad4480f64441469d4b9edfe7ea8be` | + + +### Description + +- Auto-detect public IP via ipify/ifconfig.me (fallback to local IP) +- Split LPORT (payload) vs LPORT_BIND (handler) for NAT environments +- Listener binds 0.0.0.0 instead of LHOST +- get_random_host: ILIKE + filter on purpose (server/device/router/firewall) +- Handle RPORT from open_ports, set empty string for PASSWORD fields +- Prioritize bind payloads over reverse for internet targets +- Remove upfront linux module search (now per-host via build_targeted_exploits) + +Co-Authored-By: Claude Sonnet 4.6 + +### Files Changed + +``` +M borodino/thearm_uzi +M stack/40-service-borodino.yml +``` + +### Diff Summary + +``` + borodino/thearm_uzi | 53 +++++++++++++++++++++++++++++++++++-------- + stack/40-service-borodino.yml | 5 ++-- + 2 files changed, 46 insertions(+), 12 deletions(-) +```