blog/content/posts/commits/2026-03-18-commit-b93e503.md

title, date, draft, tags, categories, summary, author

title	date	draft	tags	categories	summary	author
[bojemoi] feat(borodino/uzi): auto-detect LHOST, split LPORT_BIND, improve exploit targeting	2026-03-18T13:52:08+01:00	false	commit bojemoi main	Git Activity	Commit b93e503 par Betty dans bojemoi	Betty

Commit b93e503

Repository	bojemoi
Branch	main
Author	Betty
Hash	b93e503aa9dad4480f64441469d4b9edfe7ea8be

Description

• Auto-detect public IP via ipify/ifconfig.me (fallback to local IP)
• Split LPORT (payload) vs LPORT_BIND (handler) for NAT environments
• Listener binds 0.0.0.0 instead of LHOST
• get_random_host: ILIKE + filter on purpose (server/device/router/firewall)
• Handle RPORT from open_ports, set empty string for PASSWORD fields
• Prioritize bind payloads over reverse for internet targets
• Remove upfront linux module search (now per-host via build_targeted_exploits)

Co-Authored-By: Claude Sonnet 4.6 noreply@anthropic.com

Files Changed

M	borodino/thearm_uzi
M	stack/40-service-borodino.yml

Diff Summary

 borodino/thearm_uzi           | 53 +++++++++++++++++++++++++++++++++++--------
 stack/40-service-borodino.yml |  5 ++--
 2 files changed, 46 insertions(+), 12 deletions(-)