evil-winrm: Update gems to fix rexml vulnerability

This commit is contained in:
Guy Chronister 2025-03-23 09:17:40 -05:00
parent f3a2a0601e
commit d368851be7
3 changed files with 44 additions and 28 deletions

View File

@ -2,30 +2,32 @@ GEM
remote: https://rubygems.org/ remote: https://rubygems.org/
specs: specs:
base64 (0.2.0) base64 (0.2.0)
bigdecimal (3.1.8) bigdecimal (3.1.9)
builder (3.3.0) builder (3.3.0)
erubi (1.13.0) erubi (1.13.1)
ffi (1.17.0) ffi (1.17.1)
fileutils (1.7.2) fileutils (1.7.3)
gssapi (1.3.1) gssapi (1.3.1)
ffi (>= 1.0.1) ffi (>= 1.0.1)
gyoku (1.4.0) gyoku (1.4.0)
builder (>= 2.1.2) builder (>= 2.1.2)
rexml (~> 3.0) rexml (~> 3.0)
httpclient (2.8.3) httpclient (2.9.0)
mutex_m
little-plugger (1.1.4) little-plugger (1.1.4)
logger (1.6.1) logger (1.6.6)
logging (2.4.0) logging (2.4.0)
little-plugger (~> 1.1) little-plugger (~> 1.1)
multi_json (~> 1.14) multi_json (~> 1.14)
multi_json (1.15.0) multi_json (1.15.0)
mutex_m (0.3.0)
nori (2.7.1) nori (2.7.1)
bigdecimal bigdecimal
rexml (3.3.8) rexml (3.4.1)
rubyntlm (0.6.5) rubyntlm (0.6.5)
base64 base64
rubyzip (2.3.2) rubyzip (2.4.1)
stringio (3.1.1) stringio (3.1.5)
winrm (2.3.9) winrm (2.3.9)
builder (>= 2.1.2) builder (>= 2.1.2)
erubi (~> 1.8) erubi (~> 1.8)
@ -53,4 +55,4 @@ DEPENDENCIES
winrm-fs winrm-fs
BUNDLED WITH BUNDLED WITH
2.2.24 2.6.2

View File

@ -14,10 +14,10 @@
platforms = [ ]; platforms = [ ];
source = { source = {
remotes = [ "https://rubygems.org" ]; remotes = [ "https://rubygems.org" ];
sha256 = "1gi7zqgmqwi5lizggs1jhc3zlwaqayy9rx2ah80sxy24bbnng558"; sha256 = "1k6qzammv9r6b2cw3siasaik18i6wjc5m0gw5nfdc6jj64h79z1g";
type = "gem"; type = "gem";
}; };
version = "3.1.8"; version = "3.1.9";
}; };
builder = { builder = {
groups = [ "default" ]; groups = [ "default" ];
@ -34,30 +34,30 @@
platforms = [ ]; platforms = [ ];
source = { source = {
remotes = [ "https://rubygems.org" ]; remotes = [ "https://rubygems.org" ];
sha256 = "0qnd6ff4az22ysnmni3730c41b979xinilahzg86bn7gv93ip9pw"; sha256 = "1naaxsqkv5b3vklab5sbb9sdpszrjzlfsbqpy7ncbnw510xi10m0";
type = "gem"; type = "gem";
}; };
version = "1.13.0"; version = "1.13.1";
}; };
ffi = { ffi = {
groups = [ "default" ]; groups = [ "default" ];
platforms = [ ]; platforms = [ ];
source = { source = {
remotes = [ "https://rubygems.org" ]; remotes = [ "https://rubygems.org" ];
sha256 = "07139870npj59jnl8vmk39ja3gdk3fb5z9vc0lf32y2h891hwqsi"; sha256 = "0fgwn1grxf4zxmyqmb9i4z2hr111585n9jnk17y6y7hhs7dv1xi6";
type = "gem"; type = "gem";
}; };
version = "1.17.0"; version = "1.17.1";
}; };
fileutils = { fileutils = {
groups = [ "default" ]; groups = [ "default" ];
platforms = [ ]; platforms = [ ];
source = { source = {
remotes = [ "https://rubygems.org" ]; remotes = [ "https://rubygems.org" ];
sha256 = "0c86k3027r896wsgvjgdx27kg5d2x4479bc6ni93w9hq88rgp81n"; sha256 = "1nmmbvqxssmn9cav5x5sxcw9ab3vqpskdy3nbmsqfjk99f2iw9sp";
type = "gem"; type = "gem";
}; };
version = "1.7.2"; version = "1.7.3";
}; };
gssapi = { gssapi = {
dependencies = [ "ffi" ]; dependencies = [ "ffi" ];
@ -85,14 +85,15 @@
version = "1.4.0"; version = "1.4.0";
}; };
httpclient = { httpclient = {
dependencies = [ "mutex_m" ];
groups = [ "default" ]; groups = [ "default" ];
platforms = [ ]; platforms = [ ];
source = { source = {
remotes = [ "https://rubygems.org" ]; remotes = [ "https://rubygems.org" ];
sha256 = "19mxmvghp7ki3klsxwrlwr431li7hm1lczhhj8z4qihl2acy8l99"; sha256 = "1j4qwj1nv66v3n9s4xqf64x2galvjm630bwa5xngicllwic5jr2b";
type = "gem"; type = "gem";
}; };
version = "2.8.3"; version = "2.9.0";
}; };
little-plugger = { little-plugger = {
groups = [ "default" ]; groups = [ "default" ];
@ -109,10 +110,10 @@
platforms = [ ]; platforms = [ ];
source = { source = {
remotes = [ "https://rubygems.org" ]; remotes = [ "https://rubygems.org" ];
sha256 = "0lwncq2rf8gm79g2rcnnyzs26ma1f4wnfjm6gs4zf2wlsdz5in9s"; sha256 = "05s008w9vy7is3njblmavrbdzyrwwc1fsziffdr58w9pwqj8sqfx";
type = "gem"; type = "gem";
}; };
version = "1.6.1"; version = "1.6.6";
}; };
logging = { logging = {
dependencies = [ dependencies = [
@ -138,6 +139,16 @@
}; };
version = "1.15.0"; version = "1.15.0";
}; };
mutex_m = {
groups = [ "default" ];
platforms = [ ];
source = {
remotes = [ "https://rubygems.org" ];
sha256 = "0l875dw0lk7b2ywa54l0wjcggs94vb7gs8khfw9li75n2sn09jyg";
type = "gem";
};
version = "0.3.0";
};
nori = { nori = {
dependencies = [ "bigdecimal" ]; dependencies = [ "bigdecimal" ];
groups = [ "default" ]; groups = [ "default" ];
@ -154,10 +165,10 @@
platforms = [ ]; platforms = [ ];
source = { source = {
remotes = [ "https://rubygems.org" ]; remotes = [ "https://rubygems.org" ];
sha256 = "0rr145mvjgc4n28lfy0gw87aw3ab680h83bdi5i102ik8mixk3zn"; sha256 = "1jmbf6lf7pcyacpb939xjjpn1f84c3nw83dy3p1lwjx0l2ljfif7";
type = "gem"; type = "gem";
}; };
version = "3.3.8"; version = "3.4.1";
}; };
rubyntlm = { rubyntlm = {
dependencies = [ "base64" ]; dependencies = [ "base64" ];
@ -175,20 +186,20 @@
platforms = [ ]; platforms = [ ];
source = { source = {
remotes = [ "https://rubygems.org" ]; remotes = [ "https://rubygems.org" ];
sha256 = "0grps9197qyxakbpw02pda59v45lfgbgiyw48i0mq9f2bn9y6mrz"; sha256 = "05an0wz87vkmqwcwyh5rjiaavydfn5f4q1lixcsqkphzvj7chxw5";
type = "gem"; type = "gem";
}; };
version = "2.3.2"; version = "2.4.1";
}; };
stringio = { stringio = {
groups = [ "default" ]; groups = [ "default" ];
platforms = [ ]; platforms = [ ];
source = { source = {
remotes = [ "https://rubygems.org" ]; remotes = [ "https://rubygems.org" ];
sha256 = "07mfqb40b2wh53k33h91zva78f9zwcdnl85jiq74wnaw2wa6wiak"; sha256 = "1j1mgvrgkxhadi6nb6pz1kcff7gsb5aivj1vfhsia4ssa5hj9adw";
type = "gem"; type = "gem";
}; };
version = "3.1.1"; version = "3.1.5";
}; };
winrm = { winrm = {
dependencies = [ dependencies = [

View File

@ -3,6 +3,7 @@
, fetchFromGitHub , fetchFromGitHub
, makeWrapper , makeWrapper
, bundlerEnv , bundlerEnv
, bundlerUpdateScript
}: }:
stdenv.mkDerivation rec { stdenv.mkDerivation rec {
@ -36,6 +37,8 @@ stdenv.mkDerivation rec {
cp evil-winrm.rb $out/bin/evil-winrm cp evil-winrm.rb $out/bin/evil-winrm
''; '';
passthru.updateScript = bundlerUpdateScript "evil-winrm";
meta = with lib; { meta = with lib; {
description = "WinRM shell for hacking/pentesting"; description = "WinRM shell for hacking/pentesting";
mainProgram = "evil-winrm"; mainProgram = "evil-winrm";