Issue 3 in kautilya: writing to output folder causes issue for non-root users

13 views
Skip to first unread message

kaut...@googlecode.com

unread,
Nov 11, 2013, 7:33:32 PM11/11/13
to kautily...@googlegroups.com
Status: New
Owner: ----
Labels: Type-Defect Priority-Medium

New issue 3 by fnord.z...@gmail.com: writing to output folder causes issue
for non-root users
http://code.google.com/p/kautilya/issues/detail?id=3

What steps will reproduce the problem?
1. Just running the application, and building a payload of any type will
cause kautilya to place the created payload in the ./output folder

What is the expected output? What do you see instead?
The *current* expected output is that the payload of any type will cause
kautilya to place the created payload in the ./output folder, and I see
that just as any person running kautilya would

What version of the product are you using? On what operating system?
I am running the current svn version >> version 0.4.4 per the 'kautilya.rb'
file. I am running arch linux (latest and greatest)

Please provide any additional information below.
What I am working on is re-distributing 'kautilya' with blackarch which
is "a lightweight expansion to Arch Linux for penetration testers." in an
effort to get this package ready for inclusion into blackarch, we have
found that every payload of any type will cause kautilya to place the
created payload in the ./output folder. this is fine if the user running
kautilya is a root user, but we would like to have "normal" users to be
able to run kautilya to create payloads as well. I believe a solution would
be to either output the created payload to "~/.kautilya", or "/tmp" as the
easiest solution, or make it so that during installation or when running
kautilya the output directory could be read from a .ini file of sorts so it
can be changed as desired.

currently, to distribute kautilya with blackarch we are doing what we are
calling "user carbon copying" kautilya to the users home directory
temporarilly so that the outputed payload will be placed
in "~/.kautilya/output". this is quite hackish, but works for now.... we
figured creating an issue with the application creator would be a solution
not only for blackarch, but anyone else who would like to redistibute this
great application.

--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings

kaut...@googlecode.com

unread,
Nov 12, 2013, 12:51:29 AM11/12/13
to kautily...@googlegroups.com
Updates:
Status: Fixed
Owner: Nikhil.u...@gmail.com

Comment #1 on issue 3 by Nikhil.u...@gmail.com: writing to output folder
Thank you very much for reporting. The issue has been fixed.

After trying various methods (writing the output to user home, /tmp etc.) I
think it would be better to write output relative to current working
directory of kautilya.rb. So now, Kautilya will keep writing the outputs to
the output directory within kautilya directory but works for non-root users
too. For this only minor changes were required.

1. Read the current working directory from kautilya.rb in a variable.
2. Use the variable in methods.rb to write the output.

Hope it solves the problem. You can update your repo of Kautilya to get the
changes.

Great to know you are distributing it with blackarchm please let me know if
you face more issues.
Reply all
Reply to author
Forward
0 new messages