Land #20707, adds note "CAP_SYS_BOOT privileges are required" to Linux Reboot payloads

msutovsky-r7 · web-flow · commit d8b544b1aba7 · 2025-11-19T12:10:03.000+01:00
Add note "CAP_SYS_BOOT privileges are required" to Linux Reboot payloads
diff --git a/modules/payloads/singles/linux/mipsbe/reboot.rb b/modules/payloads/singles/linux/mipsbe/reboot.rb
@@ -17,12 +17,14 @@ def initialize(info = {})
           A very small shellcode for rebooting the system.
           This payload is sometimes helpful for testing purposes or executing
           other payloads that rely on initial startup procedures.
+          Requires CAP_SYS_BOOT privileges.
         },
         'Author' => [
           'Michael Messner <devnull[at]s3cur1ty.de>', # metasploit payload
           'rigan - <imrigan[at]gmail.com>' # original payload
         ],
         'References' => [
+          ['URL', 'https://man7.org/linux/man-pages/man2/reboot.2.html'],
           ['URL', 'http://www.shell-storm.org/shellcode/files/shellcode-795.php']
         ],
         'License' => MSF_LICENSE,
diff --git a/modules/payloads/singles/linux/mipsle/reboot.rb b/modules/payloads/singles/linux/mipsle/reboot.rb
@@ -14,14 +14,16 @@ def initialize(info = {})
         info,
         'Name' => 'Linux Reboot',
         'Description' => %q{
-          A very small shellcode for rebooting the system.
-          This payload is sometimes helpful for testing purposes.
+          A very small shellcode for rebooting the system using
+          the reboot syscall. This payload is sometimes helpful
+          for testing purposes. Requires CAP_SYS_BOOT privileges.
         },
         'Author' => [
           'Michael Messner <devnull[at]s3cur1ty.de>', # metasploit payload
           'rigan - <imrigan[at]gmail.com>' # original payload
         ],
         'References' => [
+          ['URL', 'https://man7.org/linux/man-pages/man2/reboot.2.html'],
           ['URL', 'http://www.shell-storm.org/shellcode/files/shellcode-795.php']
         ],
         'License' => MSF_LICENSE,
diff --git a/modules/payloads/singles/linux/riscv32le/reboot.rb b/modules/payloads/singles/linux/riscv32le/reboot.rb
@@ -16,12 +16,16 @@ def initialize(info = {})
         'Description' => %q{
           A very small shellcode for rebooting the system using
           the reboot syscall. This payload is sometimes helpful
-          for testing purposes.
+          for testing purposes. Requires CAP_SYS_BOOT privileges.
         },
         'Author' => 'bcoles',
         'License' => MSF_LICENSE,
         'Platform' => 'linux',
-        'Arch' => ARCH_RISCV32LE
+        'Arch' => ARCH_RISCV32LE,
+        'References' => [
+          ['URL', 'https://man7.org/linux/man-pages/man2/reboot.2.html'],
+          ['URL', 'https://github.com/bcoles/shellcode/blob/main/riscv32/reboot/reboot.s'],
+        ]
       )
     )
   end
diff --git a/modules/payloads/singles/linux/riscv64le/reboot.rb b/modules/payloads/singles/linux/riscv64le/reboot.rb
@@ -16,12 +16,16 @@ def initialize(info = {})
         'Description' => %q{
           A very small shellcode for rebooting the system using
           the reboot syscall. This payload is sometimes helpful
-          for testing purposes.
+          for testing purposes. Requires CAP_SYS_BOOT privileges.
         },
         'Author' => 'bcoles',
         'License' => MSF_LICENSE,
         'Platform' => 'linux',
-        'Arch' => ARCH_RISCV64LE
+        'Arch' => ARCH_RISCV64LE,
+        'References' => [
+          ['URL', 'https://man7.org/linux/man-pages/man2/reboot.2.html'],
+          ['URL', 'https://github.com/bcoles/shellcode/blob/main/riscv64/reboot/reboot.s'],
+        ]
       )
     )
   end
