47 lines
1.3 KiB
Markdown
47 lines
1.3 KiB
Markdown
---
|
|
title: "[bojemoi] feat(borodino/uzi): auto-detect LHOST, split LPORT_BIND, improve exploit targeting"
|
|
date: 2026-03-18T13:52:08+01:00
|
|
draft: false
|
|
tags: ["commit", "bojemoi", "main"]
|
|
categories: ["Git Activity"]
|
|
summary: "Commit b93e503 par Betty dans bojemoi"
|
|
author: "Betty"
|
|
---
|
|
|
|
## Commit `b93e503`
|
|
|
|
| | |
|
|
|---|---|
|
|
| **Repository** | bojemoi |
|
|
| **Branch** | `main` |
|
|
| **Author** | Betty |
|
|
| **Hash** | `b93e503aa9dad4480f64441469d4b9edfe7ea8be` |
|
|
|
|
|
|
### Description
|
|
|
|
- Auto-detect public IP via ipify/ifconfig.me (fallback to local IP)
|
|
- Split LPORT (payload) vs LPORT_BIND (handler) for NAT environments
|
|
- Listener binds 0.0.0.0 instead of LHOST
|
|
- get_random_host: ILIKE + filter on purpose (server/device/router/firewall)
|
|
- Handle RPORT from open_ports, set empty string for PASSWORD fields
|
|
- Prioritize bind payloads over reverse for internet targets
|
|
- Remove upfront linux module search (now per-host via build_targeted_exploits)
|
|
|
|
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
|
|
|
|
### Files Changed
|
|
|
|
```
|
|
M borodino/thearm_uzi
|
|
M stack/40-service-borodino.yml
|
|
```
|
|
|
|
### Diff Summary
|
|
|
|
```
|
|
borodino/thearm_uzi | 53 +++++++++++++++++++++++++++++++++++--------
|
|
stack/40-service-borodino.yml | 5 ++--
|
|
2 files changed, 46 insertions(+), 12 deletions(-)
|
|
```
|