feat: add PrependSetreuid for linux/aarch64

rapid7 · Dec 20, 2024 · aca6613 · aca6613
1 parent 30e13c9
commit aca6613
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/lib/msf/core/payload/linux/aarch64/prepends.rb b/lib/msf/core/payload/linux/aarch64/prepends.rb
@@ -17,8 +17,13 @@ def prepends_map
         # setuid(0)
         'PrependSetuid' =>  "\xe0\x03\x1f\xaa" +  # mov   x0, xzr
                             "\x48\x12\x80\xd2" +  # mov   x8, #0x92
-                            "\x01\x00\x00\xd4"    # svc   0x0
+                            "\x01\x00\x00\xd4",   # svc   0x0
 
+        # setreuid(0, 0)
+        'PrependSetreuid' =>  "\xe0\x03\x1f\xaa" +  # mov        x0, xzr
+                              "\xe1\x03\x1f\xaa" +  # mov        x1, xzr
+                              "\x28\x12\x80\xd2" +  # mov        x8, #0x91
+                              "\x01\x00\x00\xd4"    # svc        0x0
       }
     end