librex 0.0.13 → 0.0.15

Sign up to get free protection for your applications and to get access to all the features.
Files changed (435) hide show
  1. data/README.markdown +1 -1
  2. data/Rakefile +1 -0
  3. metadata +3 -435
  4. data/lib/rex/LICENSE +0 -29
  5. data/lib/rex/arch.rb +0 -103
  6. data/lib/rex/arch/sparc.rb +0 -75
  7. data/lib/rex/arch/sparc.rb.ut.rb +0 -18
  8. data/lib/rex/arch/x86.rb +0 -513
  9. data/lib/rex/arch/x86.rb.ut.rb +0 -93
  10. data/lib/rex/assembly/nasm.rb +0 -104
  11. data/lib/rex/assembly/nasm.rb.ut.rb +0 -22
  12. data/lib/rex/codepage.map +0 -104
  13. data/lib/rex/compat.rb +0 -311
  14. data/lib/rex/constants.rb +0 -113
  15. data/lib/rex/elfparsey.rb +0 -11
  16. data/lib/rex/elfparsey/elf.rb +0 -123
  17. data/lib/rex/elfparsey/elfbase.rb +0 -258
  18. data/lib/rex/elfparsey/exceptions.rb +0 -27
  19. data/lib/rex/elfscan.rb +0 -12
  20. data/lib/rex/elfscan/scanner.rb +0 -207
  21. data/lib/rex/elfscan/search.rb +0 -46
  22. data/lib/rex/encoder/alpha2.rb +0 -31
  23. data/lib/rex/encoder/alpha2/alpha_mixed.rb +0 -68
  24. data/lib/rex/encoder/alpha2/alpha_upper.rb +0 -79
  25. data/lib/rex/encoder/alpha2/generic.rb +0 -114
  26. data/lib/rex/encoder/alpha2/unicode_mixed.rb +0 -117
  27. data/lib/rex/encoder/alpha2/unicode_upper.rb +0 -129
  28. data/lib/rex/encoder/ndr.rb +0 -89
  29. data/lib/rex/encoder/ndr.rb.ut.rb +0 -44
  30. data/lib/rex/encoder/nonalpha.rb +0 -61
  31. data/lib/rex/encoder/nonupper.rb +0 -64
  32. data/lib/rex/encoder/xdr.rb +0 -106
  33. data/lib/rex/encoder/xdr.rb.ut.rb +0 -29
  34. data/lib/rex/encoder/xor.rb +0 -69
  35. data/lib/rex/encoder/xor/dword.rb +0 -13
  36. data/lib/rex/encoder/xor/dword_additive.rb +0 -13
  37. data/lib/rex/encoders/xor_dword.rb +0 -35
  38. data/lib/rex/encoders/xor_dword_additive.rb +0 -53
  39. data/lib/rex/encoders/xor_dword_additive.rb.ut.rb +0 -12
  40. data/lib/rex/encoding/xor.rb +0 -20
  41. data/lib/rex/encoding/xor.rb.ts.rb +0 -14
  42. data/lib/rex/encoding/xor/byte.rb +0 -15
  43. data/lib/rex/encoding/xor/byte.rb.ut.rb +0 -21
  44. data/lib/rex/encoding/xor/dword.rb +0 -21
  45. data/lib/rex/encoding/xor/dword.rb.ut.rb +0 -15
  46. data/lib/rex/encoding/xor/dword_additive.rb +0 -92
  47. data/lib/rex/encoding/xor/dword_additive.rb.ut.rb +0 -15
  48. data/lib/rex/encoding/xor/exceptions.rb +0 -17
  49. data/lib/rex/encoding/xor/generic.rb +0 -146
  50. data/lib/rex/encoding/xor/generic.rb.ut.rb +0 -120
  51. data/lib/rex/encoding/xor/qword.rb +0 -15
  52. data/lib/rex/encoding/xor/word.rb +0 -21
  53. data/lib/rex/encoding/xor/word.rb.ut.rb +0 -13
  54. data/lib/rex/exceptions.rb +0 -275
  55. data/lib/rex/exceptions.rb.ut.rb +0 -44
  56. data/lib/rex/exploitation/cmdstager.rb +0 -9
  57. data/lib/rex/exploitation/cmdstager/base.rb +0 -175
  58. data/lib/rex/exploitation/cmdstager/debug_asm.rb +0 -142
  59. data/lib/rex/exploitation/cmdstager/debug_write.rb +0 -136
  60. data/lib/rex/exploitation/cmdstager/tftp.rb +0 -63
  61. data/lib/rex/exploitation/cmdstager/vbs.rb +0 -128
  62. data/lib/rex/exploitation/egghunter.rb +0 -277
  63. data/lib/rex/exploitation/egghunter.rb.ut.rb +0 -25
  64. data/lib/rex/exploitation/encryptjs.rb +0 -77
  65. data/lib/rex/exploitation/heaplib.js.b64 +0 -331
  66. data/lib/rex/exploitation/heaplib.rb +0 -94
  67. data/lib/rex/exploitation/javascriptosdetect.rb +0 -897
  68. data/lib/rex/exploitation/obfuscatejs.rb +0 -335
  69. data/lib/rex/exploitation/omelet.rb +0 -320
  70. data/lib/rex/exploitation/omelet.rb.ut.rb +0 -13
  71. data/lib/rex/exploitation/opcodedb.rb +0 -818
  72. data/lib/rex/exploitation/opcodedb.rb.ut.rb +0 -279
  73. data/lib/rex/exploitation/seh.rb +0 -92
  74. data/lib/rex/exploitation/seh.rb.ut.rb +0 -19
  75. data/lib/rex/file.rb +0 -112
  76. data/lib/rex/file.rb.ut.rb +0 -16
  77. data/lib/rex/image_source.rb +0 -12
  78. data/lib/rex/image_source/disk.rb +0 -60
  79. data/lib/rex/image_source/image_source.rb +0 -46
  80. data/lib/rex/image_source/memory.rb +0 -37
  81. data/lib/rex/io/bidirectional_pipe.rb +0 -157
  82. data/lib/rex/io/datagram_abstraction.rb +0 -35
  83. data/lib/rex/io/stream.rb +0 -319
  84. data/lib/rex/io/stream_abstraction.rb +0 -197
  85. data/lib/rex/io/stream_server.rb +0 -211
  86. data/lib/rex/job_container.rb +0 -187
  87. data/lib/rex/logging.rb +0 -4
  88. data/lib/rex/logging/log_dispatcher.rb +0 -179
  89. data/lib/rex/logging/log_sink.rb +0 -42
  90. data/lib/rex/logging/sinks/flatfile.rb +0 -55
  91. data/lib/rex/logging/sinks/stderr.rb +0 -43
  92. data/lib/rex/machparsey.rb +0 -9
  93. data/lib/rex/machparsey/exceptions.rb +0 -34
  94. data/lib/rex/machparsey/mach.rb +0 -209
  95. data/lib/rex/machparsey/machbase.rb +0 -408
  96. data/lib/rex/machscan.rb +0 -9
  97. data/lib/rex/machscan/scanner.rb +0 -217
  98. data/lib/rex/mime.rb +0 -9
  99. data/lib/rex/mime/header.rb +0 -77
  100. data/lib/rex/mime/message.rb +0 -144
  101. data/lib/rex/mime/part.rb +0 -20
  102. data/lib/rex/nop/opty2.rb +0 -108
  103. data/lib/rex/nop/opty2.rb.ut.rb +0 -23
  104. data/lib/rex/nop/opty2_tables.rb +0 -300
  105. data/lib/rex/ole.rb +0 -205
  106. data/lib/rex/ole/clsid.rb +0 -47
  107. data/lib/rex/ole/difat.rb +0 -141
  108. data/lib/rex/ole/directory.rb +0 -231
  109. data/lib/rex/ole/direntry.rb +0 -240
  110. data/lib/rex/ole/docs/dependencies.txt +0 -8
  111. data/lib/rex/ole/docs/references.txt +0 -1
  112. data/lib/rex/ole/fat.rb +0 -99
  113. data/lib/rex/ole/header.rb +0 -204
  114. data/lib/rex/ole/minifat.rb +0 -77
  115. data/lib/rex/ole/propset.rb +0 -144
  116. data/lib/rex/ole/samples/create_ole.rb +0 -27
  117. data/lib/rex/ole/samples/dir.rb +0 -35
  118. data/lib/rex/ole/samples/dump_stream.rb +0 -34
  119. data/lib/rex/ole/samples/ole_info.rb +0 -23
  120. data/lib/rex/ole/storage.rb +0 -395
  121. data/lib/rex/ole/stream.rb +0 -53
  122. data/lib/rex/ole/substorage.rb +0 -49
  123. data/lib/rex/ole/util.rb +0 -157
  124. data/lib/rex/parser/arguments.rb +0 -97
  125. data/lib/rex/parser/arguments.rb.ut.rb +0 -67
  126. data/lib/rex/parser/ini.rb +0 -185
  127. data/lib/rex/parser/ini.rb.ut.rb +0 -29
  128. data/lib/rex/parser/ip360_aspl_xml.rb +0 -102
  129. data/lib/rex/parser/ip360_xml.rb +0 -93
  130. data/lib/rex/parser/nessus_xml.rb +0 -118
  131. data/lib/rex/parser/netsparker_xml.rb +0 -94
  132. data/lib/rex/parser/nexpose_xml.rb +0 -131
  133. data/lib/rex/parser/nmap_xml.rb +0 -121
  134. data/lib/rex/parser/retina_xml.rb +0 -109
  135. data/lib/rex/payloads.rb +0 -1
  136. data/lib/rex/payloads/win32.rb +0 -2
  137. data/lib/rex/payloads/win32/common.rb +0 -26
  138. data/lib/rex/payloads/win32/kernel.rb +0 -53
  139. data/lib/rex/payloads/win32/kernel/common.rb +0 -54
  140. data/lib/rex/payloads/win32/kernel/migration.rb +0 -12
  141. data/lib/rex/payloads/win32/kernel/recovery.rb +0 -50
  142. data/lib/rex/payloads/win32/kernel/stager.rb +0 -194
  143. data/lib/rex/peparsey.rb +0 -12
  144. data/lib/rex/peparsey/exceptions.rb +0 -32
  145. data/lib/rex/peparsey/pe.rb +0 -212
  146. data/lib/rex/peparsey/pe_memdump.rb +0 -63
  147. data/lib/rex/peparsey/pebase.rb +0 -1680
  148. data/lib/rex/peparsey/section.rb +0 -136
  149. data/lib/rex/pescan.rb +0 -13
  150. data/lib/rex/pescan/analyze.rb +0 -309
  151. data/lib/rex/pescan/scanner.rb +0 -206
  152. data/lib/rex/pescan/search.rb +0 -56
  153. data/lib/rex/platforms.rb +0 -1
  154. data/lib/rex/platforms/windows.rb +0 -51
  155. data/lib/rex/poly.rb +0 -132
  156. data/lib/rex/poly/block.rb +0 -477
  157. data/lib/rex/poly/register.rb +0 -100
  158. data/lib/rex/poly/register/x86.rb +0 -40
  159. data/lib/rex/post.rb +0 -8
  160. data/lib/rex/post/dir.rb +0 -51
  161. data/lib/rex/post/file.rb +0 -172
  162. data/lib/rex/post/file_stat.rb +0 -220
  163. data/lib/rex/post/gen.pl +0 -13
  164. data/lib/rex/post/io.rb +0 -182
  165. data/lib/rex/post/meterpreter.rb +0 -4
  166. data/lib/rex/post/meterpreter/channel.rb +0 -445
  167. data/lib/rex/post/meterpreter/channel_container.rb +0 -54
  168. data/lib/rex/post/meterpreter/channels/pool.rb +0 -160
  169. data/lib/rex/post/meterpreter/channels/pools/file.rb +0 -62
  170. data/lib/rex/post/meterpreter/channels/pools/stream_pool.rb +0 -103
  171. data/lib/rex/post/meterpreter/channels/stream.rb +0 -87
  172. data/lib/rex/post/meterpreter/client.rb +0 -364
  173. data/lib/rex/post/meterpreter/client_core.rb +0 -274
  174. data/lib/rex/post/meterpreter/dependencies.rb +0 -3
  175. data/lib/rex/post/meterpreter/extension.rb +0 -32
  176. data/lib/rex/post/meterpreter/extensions/espia/espia.rb +0 -58
  177. data/lib/rex/post/meterpreter/extensions/espia/tlv.rb +0 -16
  178. data/lib/rex/post/meterpreter/extensions/incognito/incognito.rb +0 -94
  179. data/lib/rex/post/meterpreter/extensions/incognito/tlv.rb +0 -21
  180. data/lib/rex/post/meterpreter/extensions/networkpug/networkpug.rb +0 -57
  181. data/lib/rex/post/meterpreter/extensions/networkpug/tlv.rb +0 -15
  182. data/lib/rex/post/meterpreter/extensions/priv/fs.rb +0 -118
  183. data/lib/rex/post/meterpreter/extensions/priv/passwd.rb +0 -61
  184. data/lib/rex/post/meterpreter/extensions/priv/priv.rb +0 -111
  185. data/lib/rex/post/meterpreter/extensions/priv/tlv.rb +0 -28
  186. data/lib/rex/post/meterpreter/extensions/sniffer/sniffer.rb +0 -101
  187. data/lib/rex/post/meterpreter/extensions/sniffer/tlv.rb +0 -26
  188. data/lib/rex/post/meterpreter/extensions/stdapi/constants.rb +0 -333
  189. data/lib/rex/post/meterpreter/extensions/stdapi/fs/dir.rb +0 -282
  190. data/lib/rex/post/meterpreter/extensions/stdapi/fs/file.rb +0 -266
  191. data/lib/rex/post/meterpreter/extensions/stdapi/fs/file_stat.rb +0 -103
  192. data/lib/rex/post/meterpreter/extensions/stdapi/fs/io.rb +0 -48
  193. data/lib/rex/post/meterpreter/extensions/stdapi/net/config.rb +0 -144
  194. data/lib/rex/post/meterpreter/extensions/stdapi/net/interface.rb +0 -73
  195. data/lib/rex/post/meterpreter/extensions/stdapi/net/route.rb +0 -56
  196. data/lib/rex/post/meterpreter/extensions/stdapi/net/socket.rb +0 -137
  197. data/lib/rex/post/meterpreter/extensions/stdapi/net/socket_subsystem/tcp_client_channel.rb +0 -180
  198. data/lib/rex/post/meterpreter/extensions/stdapi/net/socket_subsystem/tcp_server_channel.rb +0 -167
  199. data/lib/rex/post/meterpreter/extensions/stdapi/net/socket_subsystem/udp_channel.rb +0 -208
  200. data/lib/rex/post/meterpreter/extensions/stdapi/railgun.rb.ts.rb +0 -6
  201. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/api_constants.rb +0 -38106
  202. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/api_constants.rb.ut.rb +0 -31
  203. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/buffer_item.rb +0 -47
  204. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/buffer_item.rb.ut.rb +0 -36
  205. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_advapi32.rb +0 -1818
  206. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_iphlpapi.rb +0 -96
  207. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_kernel32.rb +0 -3848
  208. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_netapi32.rb +0 -26
  209. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_ntdll.rb +0 -153
  210. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_shell32.rb +0 -21
  211. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_user32.rb +0 -3169
  212. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_ws2_32.rb +0 -599
  213. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/dll.rb +0 -318
  214. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/dll_function.rb +0 -100
  215. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/dll_function.rb.ut.rb +0 -42
  216. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/dll_helper.rb +0 -148
  217. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/dll_helper.rb.ut.rb +0 -127
  218. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/multicall.rb +0 -309
  219. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/railgun.rb +0 -204
  220. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/tlv.rb +0 -51
  221. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/util.rb +0 -630
  222. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/win_const_manager.rb +0 -75
  223. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/win_const_manager.rb.ut.rb +0 -103
  224. data/lib/rex/post/meterpreter/extensions/stdapi/stdapi.rb +0 -149
  225. data/lib/rex/post/meterpreter/extensions/stdapi/sys/config.rb +0 -97
  226. data/lib/rex/post/meterpreter/extensions/stdapi/sys/event_log.rb +0 -192
  227. data/lib/rex/post/meterpreter/extensions/stdapi/sys/event_log_subsystem/event_record.rb +0 -41
  228. data/lib/rex/post/meterpreter/extensions/stdapi/sys/power.rb +0 -61
  229. data/lib/rex/post/meterpreter/extensions/stdapi/sys/process.rb +0 -370
  230. data/lib/rex/post/meterpreter/extensions/stdapi/sys/process_subsystem/image.rb +0 -129
  231. data/lib/rex/post/meterpreter/extensions/stdapi/sys/process_subsystem/io.rb +0 -55
  232. data/lib/rex/post/meterpreter/extensions/stdapi/sys/process_subsystem/memory.rb +0 -336
  233. data/lib/rex/post/meterpreter/extensions/stdapi/sys/process_subsystem/thread.rb +0 -141
  234. data/lib/rex/post/meterpreter/extensions/stdapi/sys/registry.rb +0 -279
  235. data/lib/rex/post/meterpreter/extensions/stdapi/sys/registry_subsystem/registry_key.rb +0 -193
  236. data/lib/rex/post/meterpreter/extensions/stdapi/sys/registry_subsystem/registry_value.rb +0 -102
  237. data/lib/rex/post/meterpreter/extensions/stdapi/sys/thread.rb +0 -180
  238. data/lib/rex/post/meterpreter/extensions/stdapi/tlv.rb +0 -211
  239. data/lib/rex/post/meterpreter/extensions/stdapi/ui.rb +0 -227
  240. data/lib/rex/post/meterpreter/extensions/stdapi/webcam/webcam.rb +0 -63
  241. data/lib/rex/post/meterpreter/inbound_packet_handler.rb +0 -30
  242. data/lib/rex/post/meterpreter/object_aliases.rb +0 -83
  243. data/lib/rex/post/meterpreter/packet.rb +0 -688
  244. data/lib/rex/post/meterpreter/packet_dispatcher.rb +0 -431
  245. data/lib/rex/post/meterpreter/packet_parser.rb +0 -94
  246. data/lib/rex/post/meterpreter/packet_response_waiter.rb +0 -83
  247. data/lib/rex/post/meterpreter/ui/console.rb +0 -137
  248. data/lib/rex/post/meterpreter/ui/console/command_dispatcher.rb +0 -62
  249. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/core.rb +0 -730
  250. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/espia.rb +0 -108
  251. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/incognito.rb +0 -241
  252. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/networkpug.rb +0 -231
  253. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/priv.rb +0 -61
  254. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/priv/elevate.rb +0 -98
  255. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/priv/passwd.rb +0 -51
  256. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/priv/timestomp.rb +0 -132
  257. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/sniffer.rb +0 -187
  258. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/stdapi.rb +0 -65
  259. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/stdapi/fs.rb +0 -442
  260. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/stdapi/net.rb +0 -298
  261. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/stdapi/sys.rb +0 -486
  262. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/stdapi/ui.rb +0 -315
  263. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/stdapi/webcam.rb +0 -157
  264. data/lib/rex/post/meterpreter/ui/console/interactive_channel.rb +0 -95
  265. data/lib/rex/post/permission.rb +0 -26
  266. data/lib/rex/post/process.rb +0 -57
  267. data/lib/rex/post/thread.rb +0 -57
  268. data/lib/rex/post/ui.rb +0 -52
  269. data/lib/rex/proto.rb +0 -13
  270. data/lib/rex/proto.rb.ts.rb +0 -8
  271. data/lib/rex/proto/dcerpc.rb +0 -6
  272. data/lib/rex/proto/dcerpc.rb.ts.rb +0 -9
  273. data/lib/rex/proto/dcerpc/client.rb +0 -361
  274. data/lib/rex/proto/dcerpc/client.rb.ut.rb +0 -491
  275. data/lib/rex/proto/dcerpc/exceptions.rb +0 -150
  276. data/lib/rex/proto/dcerpc/handle.rb +0 -47
  277. data/lib/rex/proto/dcerpc/handle.rb.ut.rb +0 -85
  278. data/lib/rex/proto/dcerpc/ndr.rb +0 -72
  279. data/lib/rex/proto/dcerpc/ndr.rb.ut.rb +0 -41
  280. data/lib/rex/proto/dcerpc/packet.rb +0 -253
  281. data/lib/rex/proto/dcerpc/packet.rb.ut.rb +0 -56
  282. data/lib/rex/proto/dcerpc/response.rb +0 -187
  283. data/lib/rex/proto/dcerpc/response.rb.ut.rb +0 -15
  284. data/lib/rex/proto/dcerpc/uuid.rb +0 -84
  285. data/lib/rex/proto/dcerpc/uuid.rb.ut.rb +0 -46
  286. data/lib/rex/proto/dhcp.rb +0 -7
  287. data/lib/rex/proto/dhcp/constants.rb +0 -33
  288. data/lib/rex/proto/dhcp/server.rb +0 -292
  289. data/lib/rex/proto/drda.rb +0 -5
  290. data/lib/rex/proto/drda.rb.ts.rb +0 -17
  291. data/lib/rex/proto/drda/constants.rb +0 -49
  292. data/lib/rex/proto/drda/constants.rb.ut.rb +0 -23
  293. data/lib/rex/proto/drda/packet.rb +0 -252
  294. data/lib/rex/proto/drda/packet.rb.ut.rb +0 -109
  295. data/lib/rex/proto/drda/utils.rb +0 -123
  296. data/lib/rex/proto/drda/utils.rb.ut.rb +0 -84
  297. data/lib/rex/proto/http.rb +0 -5
  298. data/lib/rex/proto/http.rb.ts.rb +0 -12
  299. data/lib/rex/proto/http/client.rb +0 -821
  300. data/lib/rex/proto/http/client.rb.ut.rb +0 -95
  301. data/lib/rex/proto/http/handler.rb +0 -46
  302. data/lib/rex/proto/http/handler/erb.rb +0 -128
  303. data/lib/rex/proto/http/handler/erb.rb.ut.rb +0 -21
  304. data/lib/rex/proto/http/handler/erb.rb.ut.rb.rhtml +0 -1
  305. data/lib/rex/proto/http/handler/proc.rb +0 -60
  306. data/lib/rex/proto/http/handler/proc.rb.ut.rb +0 -24
  307. data/lib/rex/proto/http/header.rb +0 -161
  308. data/lib/rex/proto/http/header.rb.ut.rb +0 -46
  309. data/lib/rex/proto/http/packet.rb +0 -407
  310. data/lib/rex/proto/http/packet.rb.ut.rb +0 -165
  311. data/lib/rex/proto/http/request.rb +0 -356
  312. data/lib/rex/proto/http/request.rb.ut.rb +0 -214
  313. data/lib/rex/proto/http/response.rb +0 -90
  314. data/lib/rex/proto/http/response.rb.ut.rb +0 -149
  315. data/lib/rex/proto/http/server.rb +0 -369
  316. data/lib/rex/proto/http/server.rb.ut.rb +0 -79
  317. data/lib/rex/proto/ntlm.rb +0 -7
  318. data/lib/rex/proto/ntlm.rb.ut.rb +0 -177
  319. data/lib/rex/proto/ntlm/base.rb +0 -326
  320. data/lib/rex/proto/ntlm/constants.rb +0 -74
  321. data/lib/rex/proto/ntlm/crypt.rb +0 -415
  322. data/lib/rex/proto/ntlm/exceptions.rb +0 -9
  323. data/lib/rex/proto/ntlm/message.rb +0 -533
  324. data/lib/rex/proto/ntlm/utils.rb +0 -763
  325. data/lib/rex/proto/proxy/socks4a.rb +0 -440
  326. data/lib/rex/proto/rfb.rb +0 -19
  327. data/lib/rex/proto/rfb.rb.ut.rb +0 -37
  328. data/lib/rex/proto/rfb/cipher.rb +0 -84
  329. data/lib/rex/proto/rfb/client.rb +0 -207
  330. data/lib/rex/proto/rfb/constants.rb +0 -52
  331. data/lib/rex/proto/smb.rb +0 -7
  332. data/lib/rex/proto/smb.rb.ts.rb +0 -8
  333. data/lib/rex/proto/smb/client.rb +0 -1952
  334. data/lib/rex/proto/smb/client.rb.ut.rb +0 -223
  335. data/lib/rex/proto/smb/constants.rb +0 -1047
  336. data/lib/rex/proto/smb/constants.rb.ut.rb +0 -18
  337. data/lib/rex/proto/smb/crypt.rb +0 -36
  338. data/lib/rex/proto/smb/evasions.rb +0 -66
  339. data/lib/rex/proto/smb/exceptions.rb +0 -858
  340. data/lib/rex/proto/smb/simpleclient.rb +0 -306
  341. data/lib/rex/proto/smb/simpleclient.rb.ut.rb +0 -128
  342. data/lib/rex/proto/smb/utils.rb +0 -103
  343. data/lib/rex/proto/smb/utils.rb.ut.rb +0 -20
  344. data/lib/rex/proto/sunrpc.rb +0 -1
  345. data/lib/rex/proto/sunrpc/client.rb +0 -195
  346. data/lib/rex/proto/tftp.rb +0 -12
  347. data/lib/rex/proto/tftp/constants.rb +0 -39
  348. data/lib/rex/proto/tftp/server.rb +0 -497
  349. data/lib/rex/proto/tftp/server.rb.ut.rb +0 -28
  350. data/lib/rex/script.rb +0 -42
  351. data/lib/rex/script/base.rb +0 -59
  352. data/lib/rex/script/meterpreter.rb +0 -15
  353. data/lib/rex/script/shell.rb +0 -9
  354. data/lib/rex/service.rb +0 -48
  355. data/lib/rex/service_manager.rb +0 -141
  356. data/lib/rex/service_manager.rb.ut.rb +0 -32
  357. data/lib/rex/services/local_relay.rb +0 -423
  358. data/lib/rex/socket.rb +0 -684
  359. data/lib/rex/socket.rb.ut.rb +0 -107
  360. data/lib/rex/socket/comm.rb +0 -119
  361. data/lib/rex/socket/comm/local.rb +0 -412
  362. data/lib/rex/socket/comm/local.rb.ut.rb +0 -75
  363. data/lib/rex/socket/ip.rb +0 -130
  364. data/lib/rex/socket/parameters.rb +0 -345
  365. data/lib/rex/socket/parameters.rb.ut.rb +0 -51
  366. data/lib/rex/socket/range_walker.rb +0 -346
  367. data/lib/rex/socket/range_walker.rb.ut.rb +0 -55
  368. data/lib/rex/socket/ssl_tcp.rb +0 -184
  369. data/lib/rex/socket/ssl_tcp.rb.ut.rb +0 -39
  370. data/lib/rex/socket/ssl_tcp_server.rb +0 -122
  371. data/lib/rex/socket/ssl_tcp_server.rb.ut.rb +0 -61
  372. data/lib/rex/socket/subnet_walker.rb +0 -75
  373. data/lib/rex/socket/subnet_walker.rb.ut.rb +0 -28
  374. data/lib/rex/socket/switch_board.rb +0 -278
  375. data/lib/rex/socket/switch_board.rb.ut.rb +0 -52
  376. data/lib/rex/socket/tcp.rb +0 -76
  377. data/lib/rex/socket/tcp.rb.ut.rb +0 -64
  378. data/lib/rex/socket/tcp_server.rb +0 -67
  379. data/lib/rex/socket/tcp_server.rb.ut.rb +0 -44
  380. data/lib/rex/socket/udp.rb +0 -164
  381. data/lib/rex/socket/udp.rb.ut.rb +0 -44
  382. data/lib/rex/struct2.rb +0 -5
  383. data/lib/rex/struct2/c_struct.rb +0 -181
  384. data/lib/rex/struct2/c_struct_template.rb +0 -39
  385. data/lib/rex/struct2/constant.rb +0 -26
  386. data/lib/rex/struct2/element.rb +0 -44
  387. data/lib/rex/struct2/generic.rb +0 -73
  388. data/lib/rex/struct2/restraint.rb +0 -54
  389. data/lib/rex/struct2/s_string.rb +0 -72
  390. data/lib/rex/struct2/s_struct.rb +0 -111
  391. data/lib/rex/sync.rb +0 -6
  392. data/lib/rex/sync/event.rb +0 -94
  393. data/lib/rex/sync/read_write_lock.rb +0 -176
  394. data/lib/rex/sync/ref.rb +0 -57
  395. data/lib/rex/sync/thread_safe.rb +0 -82
  396. data/lib/rex/test.rb +0 -35
  397. data/lib/rex/text.rb +0 -1149
  398. data/lib/rex/text.rb.ut.rb +0 -190
  399. data/lib/rex/thread_factory.rb +0 -42
  400. data/lib/rex/time.rb +0 -65
  401. data/lib/rex/transformer.rb +0 -115
  402. data/lib/rex/transformer.rb.ut.rb +0 -38
  403. data/lib/rex/ui.rb +0 -21
  404. data/lib/rex/ui/interactive.rb +0 -254
  405. data/lib/rex/ui/output.rb +0 -78
  406. data/lib/rex/ui/output/none.rb +0 -18
  407. data/lib/rex/ui/progress_tracker.rb +0 -96
  408. data/lib/rex/ui/subscriber.rb +0 -149
  409. data/lib/rex/ui/text/color.rb +0 -97
  410. data/lib/rex/ui/text/color.rb.ut.rb +0 -18
  411. data/lib/rex/ui/text/dispatcher_shell.rb +0 -467
  412. data/lib/rex/ui/text/input.rb +0 -117
  413. data/lib/rex/ui/text/input/buffer.rb +0 -75
  414. data/lib/rex/ui/text/input/readline.rb +0 -129
  415. data/lib/rex/ui/text/input/socket.rb +0 -95
  416. data/lib/rex/ui/text/input/stdio.rb +0 -45
  417. data/lib/rex/ui/text/irb_shell.rb +0 -57
  418. data/lib/rex/ui/text/output.rb +0 -80
  419. data/lib/rex/ui/text/output/buffer.rb +0 -61
  420. data/lib/rex/ui/text/output/file.rb +0 -43
  421. data/lib/rex/ui/text/output/socket.rb +0 -43
  422. data/lib/rex/ui/text/output/stdio.rb +0 -40
  423. data/lib/rex/ui/text/progress_tracker.rb +0 -56
  424. data/lib/rex/ui/text/progress_tracker.rb.ut.rb +0 -34
  425. data/lib/rex/ui/text/shell.rb +0 -328
  426. data/lib/rex/ui/text/table.rb +0 -279
  427. data/lib/rex/ui/text/table.rb.ut.rb +0 -55
  428. data/lib/rex/zip.rb +0 -93
  429. data/lib/rex/zip/archive.rb +0 -184
  430. data/lib/rex/zip/blocks.rb +0 -182
  431. data/lib/rex/zip/entry.rb +0 -104
  432. data/lib/rex/zip/samples/comment.rb +0 -32
  433. data/lib/rex/zip/samples/mkwar.rb +0 -138
  434. data/lib/rex/zip/samples/mkzip.rb +0 -19
  435. data/lib/rex/zip/samples/recursive.rb +0 -58
@@ -1,95 +0,0 @@
1
- module Rex
2
- module Post
3
- module Meterpreter
4
- module Ui
5
-
6
- ###
7
- #
8
- # Mixin that is meant to extend the base channel class from meterpreter in a
9
- # manner that adds interactive capabilities.
10
- #
11
- ###
12
- module Console::InteractiveChannel
13
-
14
- include Rex::Ui::Interactive
15
-
16
- #
17
- # Interacts with self.
18
- #
19
- def _interact
20
- # If the channel has a left-side socket, then we can interact with it.
21
- if (self.lsock)
22
- self.interactive(true)
23
-
24
- interact_stream(self)
25
-
26
- self.interactive(false)
27
- else
28
- print_error("Channel #{self.cid} does not support interaction.")
29
-
30
- self.interacting = false
31
- end
32
- end
33
-
34
- #
35
- # Called when an interrupt is sent.
36
- #
37
- def _interrupt
38
- prompt_yesno("Terminate channel #{self.cid}?")
39
- end
40
-
41
- #
42
- # Suspends interaction with the channel.
43
- #
44
- def _suspend
45
- # Ask the user if they would like to background the session
46
- if (prompt_yesno("Background channel #{self.cid}?") == true)
47
- self.interactive(false)
48
-
49
- self.interacting = false
50
- end
51
- end
52
-
53
- #
54
- # Closes the channel like it aint no thang.
55
- #
56
- def _interact_complete
57
- begin
58
- self.interactive(false)
59
-
60
- self.close
61
- rescue IOError
62
- end
63
- end
64
-
65
- #
66
- # Reads data from local input and writes it remotely.
67
- #
68
- def _stream_read_local_write_remote(channel)
69
- data = user_input.gets
70
- return if not data
71
- self.write(data)
72
- end
73
-
74
- #
75
- # Reads from the channel and writes locally.
76
- #
77
- def _stream_read_remote_write_local(channel)
78
- data = self.lsock.sysread(16384)
79
-
80
- user_output.print(data)
81
- end
82
-
83
- #
84
- # Returns the remote file descriptor to select on
85
- #
86
- def _remote_fd(stream)
87
- self.lsock
88
- end
89
-
90
- end
91
-
92
- end
93
- end
94
- end
95
- end
@@ -1,26 +0,0 @@
1
- #!/usr/bin/env ruby
2
-
3
- # Generic page protection flags
4
- PROT_NONE = 0
5
- PROT_READ = (1 << 0)
6
- PROT_WRITE = (1 << 1)
7
- PROT_EXEC = (1 << 2)
8
- PROT_COW = (1 << 20)
9
-
10
- # Generic permissions
11
- GEN_NONE = 0
12
- GEN_READ = (1 << 0)
13
- GEN_WRITE = (1 << 1)
14
- GEN_EXEC = (1 << 2)
15
-
16
- # Generic process open permissions
17
- PROCESS_READ = (1 << 0)
18
- PROCESS_WRITE = (1 << 1)
19
- PROCESS_EXECUTE = (1 << 2)
20
- PROCESS_ALL = 0xffffffff
21
-
22
- # Generic thread open permissions
23
- THREAD_READ = (1 << 0)
24
- THREAD_WRITE = (1 << 1)
25
- THREAD_EXECUTE = (1 << 2)
26
- THREAD_ALL = 0xffffffff
@@ -1,57 +0,0 @@
1
- #!/usr/bin/env ruby
2
-
3
- module Rex
4
- module Post
5
-
6
- ###
7
- #
8
- # This class performs basic process operations against a process running on a
9
- # remote machine via the post-exploitation mechanisms. Refer to the Ruby
10
- # documentation for expected behaviors.
11
- #
12
- ###
13
- class Process
14
-
15
- def Process.getresuid
16
- raise NotImplementedError
17
- end
18
- def Process.setresuid(a, b, c)
19
- raise NotImplementedError
20
- end
21
-
22
- def Process.euid
23
- getresuid()[1]
24
- end
25
- def Process.euid=(id)
26
- setresuid(-1, id, -1)
27
- end
28
- def Process.uid
29
- getresuid()[0]
30
- end
31
- def Process.uid=(id)
32
- setresuid(id, -1, -1)
33
- end
34
-
35
- def Process.egid
36
- getresgid()[1]
37
- end
38
- def Process.egid=(id)
39
- setresgid(-1, id, -1)
40
- end
41
- def Process.gid
42
- getresgid()[0]
43
- end
44
- def Process.gid=(id)
45
- setresgid(id, -1, -1)
46
- end
47
-
48
- def Process.pid
49
- raise NotImplementedError
50
- end
51
- def Process.ppid
52
- raise NotImplementedError
53
- end
54
-
55
- end
56
-
57
- end; end # Post/Rex
@@ -1,57 +0,0 @@
1
- #!/usr/bin/env ruby
2
-
3
- module Rex
4
- module Post
5
-
6
- ###
7
- #
8
- # This class provides generalized methods for interacting with a thread
9
- # running in a process on a remote machine via a post-exploitation client.
10
- #
11
- ###
12
- class Thread
13
-
14
- #
15
- # Suspend the remote thread.
16
- #
17
- def suspend
18
- raise NotImplementedError
19
- end
20
-
21
- #
22
- # Resume execution of the remote thread.
23
- #
24
- def resume
25
- raise NotImplementedError
26
- end
27
-
28
- #
29
- # Terminate the remote thread.
30
- #
31
- def terminate
32
- raise NotImplementedError
33
- end
34
-
35
- #
36
- # Query architecture-specific register state.
37
- #
38
- def query_regs
39
- raise NotImplementedError
40
- end
41
-
42
- #
43
- # Set architecture-specific register state.
44
- #
45
- def set_regs
46
- raise NotImplementedError
47
- end
48
-
49
- #
50
- # Close resources associated with the thread.
51
- #
52
- def close
53
- raise NotImplementedError
54
- end
55
- end
56
-
57
- end; end
data/lib/rex/post/ui.rb DELETED
@@ -1,52 +0,0 @@
1
- #!/usr/bin/env ruby
2
-
3
- module Rex
4
- module Post
5
-
6
- ###
7
- #
8
- # This class provides generalized user interface manipulation routines that
9
- # might be supported by post-exploitation clients.
10
- #
11
- ###
12
- class UI
13
-
14
- #
15
- # This method disables the keyboard on the remote machine.
16
- #
17
- def disable_keyboard
18
- raise NotImplementedError
19
- end
20
-
21
- #
22
- # This method enables the keyboard on the remote machine.
23
- #
24
- def enable_keyboard
25
- raise NotImplementedError
26
- end
27
-
28
- #
29
- # This method disables the mouse on the remote machine.
30
- #
31
- def disable_mouse
32
- raise NotImplementedError
33
- end
34
-
35
- #
36
- # This method enables the mouse on the remote machine.
37
- #
38
- def enable_mouse
39
- raise NotImplementedError
40
- end
41
-
42
- #
43
- # This method gets the number of seconds the user has been idle from input
44
- # on the remote machine.
45
- #
46
- def idle_time
47
- raise NotImplementedError
48
- end
49
-
50
- end
51
-
52
- end; end
data/lib/rex/proto.rb DELETED
@@ -1,13 +0,0 @@
1
- require 'rex/proto/http'
2
- require 'rex/proto/smb'
3
- require 'rex/proto/ntlm'
4
- require 'rex/proto/dcerpc'
5
- require 'rex/proto/drda'
6
-
7
- module Rex
8
- module Proto
9
-
10
- attr_accessor :alias
11
-
12
- end
13
- end
@@ -1,8 +0,0 @@
1
- #!/usr/bin/env ruby
2
-
3
- $:.unshift(File.join(File.dirname(__FILE__), '..'))
4
-
5
- require 'test/unit'
6
- require 'rex/proto/smb.rb.ts'
7
- require 'rex/proto/dcerpc.rb.ts'
8
- require 'rex/proto/http.rb.ts'
@@ -1,6 +0,0 @@
1
- require 'rex/proto/dcerpc/uuid'
2
- require 'rex/proto/dcerpc/response'
3
- require 'rex/proto/dcerpc/client'
4
- require 'rex/proto/dcerpc/packet'
5
- require 'rex/proto/dcerpc/handle'
6
- require 'rex/proto/dcerpc/ndr'
@@ -1,9 +0,0 @@
1
- #!/usr/bin/env ruby
2
-
3
- require 'rex/test'
4
- require 'rex/proto/dcerpc/uuid.rb.ut'
5
- require 'rex/proto/dcerpc/response.rb.ut'
6
- require 'rex/proto/dcerpc/packet.rb.ut'
7
- # require 'rex/proto/dcerpc/ndr.rb.ut'
8
- require 'rex/proto/dcerpc/handle.rb.ut'
9
- require 'rex/proto/dcerpc/client.rb.ut'
@@ -1,361 +0,0 @@
1
- module Rex
2
- module Proto
3
- module DCERPC
4
- class Client
5
-
6
- require 'rex/proto/dcerpc/uuid'
7
- require 'rex/proto/dcerpc/response'
8
- require 'rex/proto/dcerpc/exceptions'
9
- require 'rex/text'
10
- require 'rex/proto/smb/exceptions'
11
-
12
- attr_accessor :handle, :socket, :options, :last_response, :context, :no_bind, :ispipe, :smb
13
-
14
- # initialize a DCE/RPC Function Call
15
- def initialize(handle, socket, useroptions = Hash.new)
16
- self.handle = handle
17
- self.socket = socket
18
- self.options = {
19
- 'smb_user' => '',
20
- 'smb_pass' => '',
21
- 'smb_pipeio' => 'rw',
22
- 'smb_name' => nil,
23
- 'read_timeout' => 10,
24
- 'connect_timeout' => 5
25
- }
26
-
27
- self.options.merge!(useroptions)
28
-
29
- # If the caller passed us a smb_client object, use it and
30
- # and skip the connect/login/ipc$ stages of the setup
31
- if (self.options['smb_client'])
32
- self.smb = self.options['smb_client']
33
- end
34
-
35
- # we must have a valid handle, regardless of everything else
36
- raise ArgumentError, 'handle is not a Rex::Proto::DCERPC::Handle' if !self.handle.is_a?(Rex::Proto::DCERPC::Handle)
37
-
38
- # we do this in case socket needs setup first, ie, socket = nil
39
- if !self.options['no_socketsetup']
40
- self.socket_check()
41
- end
42
-
43
- raise ArgumentError, 'socket can not read' if !self.socket.respond_to?(:read)
44
- raise ArgumentError, 'socket can not write' if !self.socket.respond_to?(:write)
45
-
46
- if !self.options['no_autobind']
47
- self.bind()
48
- end
49
- end
50
-
51
- def socket_check()
52
- if self.socket == nil
53
- self.socket_setup()
54
- end
55
-
56
- case self.handle.protocol
57
- when 'ncacn_ip_tcp'
58
- if self.socket.type? != 'tcp'
59
- raise "ack, #{self.handle.protocol} requires socket type tcp, not #{self.socket.type?}!"
60
- end
61
- when 'ncacn_np'
62
- if self.socket.class == Rex::Proto::SMB::SimpleClient::OpenPipe
63
- self.ispipe = 1
64
- elsif self.socket.type? == 'tcp'
65
- self.smb_connect()
66
- else
67
- raise "ack, #{self.handle.protocol} requires socket type tcp, not #{self.socket.type?}!"
68
- end
69
- # No support ncacn_ip_udp (is it needed now that its ripped from Vista?)
70
- else
71
- raise "Unsupported protocol : #{self.handle.protocol}"
72
- end
73
- end
74
-
75
- # Create the appropriate socket based on protocol
76
- def socket_setup()
77
- ctx = { 'Msf' => self.options['Msf'], 'MsfExploit' => self.options['MsfExploit'] }
78
- self.socket = case self.handle.protocol
79
-
80
- when 'ncacn_ip_tcp'
81
- Rex::Socket.create_tcp(
82
- 'PeerHost' => self.handle.address,
83
- 'PeerPort' => self.handle.options[0],
84
- 'Context' => ctx,
85
- 'Timeout' => self.options['connect_timeout']
86
- )
87
-
88
- when 'ncacn_np'
89
- begin
90
- socket = Rex::Socket.create_tcp(
91
- 'PeerHost' => self.handle.address,
92
- 'PeerPort' => 445,
93
- 'Context' => ctx,
94
- 'Timeout' => self.options['connect_timeout']
95
- )
96
- rescue ::Timeout::Error, Rex::ConnectionRefused
97
- socket = Rex::Socket.create_tcp(
98
- 'PeerHost' => self.handle.address,
99
- 'PeerPort' => 139,
100
- 'Context' => ctx,
101
- 'Timeout' => self.options['connect_timeout']
102
- )
103
- end
104
- socket
105
- else nil
106
- end
107
-
108
- # Add this socket to the exploit's list of open sockets
109
- options['MsfExploit'].add_socket(self.socket) if (options['MsfExploit'])
110
- end
111
-
112
- def smb_connect()
113
- require 'rex/proto/smb/simpleclient'
114
-
115
- if(not self.smb)
116
- if self.socket.peerport == 139
117
- smb = Rex::Proto::SMB::SimpleClient.new(self.socket)
118
- else
119
- smb = Rex::Proto::SMB::SimpleClient.new(self.socket, true)
120
- end
121
-
122
- smb.login('*SMBSERVER', self.options['smb_user'], self.options['smb_pass'])
123
- smb.connect("\\\\#{self.handle.address}\\IPC$")
124
- self.smb = smb
125
- self.smb.read_timeout = self.options['read_timeout']
126
- end
127
-
128
- f = self.smb.create_pipe(self.handle.options[0])
129
- f.mode = self.options['smb_pipeio']
130
- self.socket = f
131
- end
132
-
133
- def read()
134
-
135
- max_read = self.options['pipe_read_max_size'] || 1024*1024
136
- min_read = self.options['pipe_read_min_size'] || max_read
137
-
138
- raw_response = ''
139
-
140
- # Are we reading from a remote pipe over SMB?
141
- if (self.socket.class == Rex::Proto::SMB::SimpleClient::OpenPipe)
142
- begin
143
-
144
- # Max SMB read is 65535, cap it at 64000
145
- max_read = [64000, max_read].min
146
- min_read = [64000, min_read].min
147
-
148
- read_limit = nil
149
-
150
- while(true)
151
- # Random read offsets will not work on Windows NT 4.0 (thanks Dave!)
152
-
153
- read_cnt = (rand(max_read-min_read)+min_read)
154
- if(read_limit)
155
- if(read_cnt + raw_response.length > read_limit)
156
- read_cnt = raw_response.length - read_limit
157
- end
158
- end
159
-
160
- data = self.socket.read( read_cnt, rand(1024)+1)
161
- break if !(data and data.length > 0)
162
- raw_response += data
163
-
164
- # Keep reading until we have at least the DCERPC header
165
- next if raw_response.length < 10
166
-
167
- # We now have to process the raw_response and parse out the DCERPC fragment length
168
- # if we have read enough data. Once we have the length value, we need to make sure
169
- # that we don't read beyond this amount, or it can screw up the SMB state
170
- if (not read_limit)
171
- begin
172
- check = Rex::Proto::DCERPC::Response.new(raw_response)
173
- read_limit = check.frag_len
174
- rescue ::Rex::Proto::DCERPC::Exceptions::InvalidPacket
175
- end
176
- end
177
- break if (read_limit and read_limit <= raw_response.length)
178
- end
179
-
180
- rescue Rex::Proto::SMB::Exceptions::NoReply
181
- # I don't care if I didn't get a reply...
182
- rescue Rex::Proto::SMB::Exceptions::ErrorCode => exception
183
- if exception.error_code != 0xC000014B
184
- raise exception
185
- end
186
- end
187
- # This must be a regular TCP or UDP socket
188
- else
189
- if (self.socket.type? == 'tcp')
190
- if (false and max_read)
191
- while (true)
192
- data = self.socket.get_once((rand(max_read-min_read)+min_read), self.options['read_timeout'])
193
- break if not data
194
- break if not data.length
195
- raw_response << data
196
- end
197
- else
198
- # Just read the entire response in one go
199
- raw_response = self.socket.get_once(-1, self.options['read_timeout'])
200
- end
201
- else
202
- # No segmented read support for non-TCP sockets
203
- raw_response = self.socket.read(0xFFFFFFFF / 2 - 1) # read max data
204
- end
205
- end
206
-
207
- raw_response
208
- end
209
-
210
- # Write data to the underlying socket, limiting the sizes of the writes based on
211
- # the pipe_write_min / pipe_write_max options.
212
- def write(data)
213
-
214
- max_write = self.options['pipe_write_max_size'] || data.length
215
- min_write = self.options['pipe_write_min_size'] || max_write
216
-
217
- if(min_write > max_write)
218
- max_write = min_write
219
- end
220
-
221
- idx = 0
222
-
223
- if (self.socket.class == Rex::Proto::SMB::SimpleClient::OpenPipe)
224
- while(idx < data.length)
225
- bsize = (rand(max_write-min_write)+min_write).to_i
226
- len = self.socket.write(data[idx, bsize], rand(1024)+1)
227
- idx += bsize
228
- end
229
- else
230
- self.socket.write(data)
231
- end
232
-
233
- data.length
234
- end
235
-
236
- def bind()
237
- require 'rex/proto/dcerpc/packet'
238
- bind = ''
239
- context = ''
240
- if self.options['fake_multi_bind']
241
-
242
- args = [ self.handle.uuid[0], self.handle.uuid[1] ]
243
-
244
- if (self.options['fake_multi_bind_prepend'])
245
- args << self.options['fake_multi_bind_prepend']
246
- end
247
-
248
- if (self.options['fake_multi_bind_append'])
249
- args << self.options['fake_multi_bind_append']
250
- end
251
-
252
- bind, context = Rex::Proto::DCERPC::Packet.make_bind_fake_multi(*args)
253
- else
254
- bind, context = Rex::Proto::DCERPC::Packet.make_bind(self.handle.uuid[0], self.handle.uuid[1])
255
- end
256
-
257
- raise 'make_bind failed' if !bind
258
-
259
- self.write(bind)
260
- raw_response = self.read()
261
-
262
- response = Rex::Proto::DCERPC::Response.new(raw_response)
263
- self.last_response = response
264
- if response.type == 12 or response.type == 15
265
- if self.last_response.ack_result[context] == 2
266
- raise "Could not bind to #{self.handle}"
267
- end
268
- self.context = context
269
- else
270
- raise "Could not bind to #{self.handle}"
271
- end
272
- end
273
-
274
- # Perform a DCE/RPC Function Call
275
- def call(function, data, do_recv = true)
276
-
277
- frag_size = data.length
278
- if options['frag_size']
279
- frag_size = options['frag_size']
280
- end
281
- object_id = ''
282
- if options['object_call']
283
- object_id = self.handle.uuid[0]
284
- end
285
- if options['random_object_id']
286
- object_id = Rex::Proto::DCERPC::UUID.uuid_unpack(Rex::Text.rand_text(16))
287
- end
288
-
289
- call_packets = Rex::Proto::DCERPC::Packet.make_request(function, data, frag_size, self.context, object_id)
290
- call_packets.each { |packet|
291
- self.write(packet)
292
- }
293
-
294
- return true if not do_recv
295
-
296
- raw_response = ''
297
-
298
- begin
299
- raw_response = self.read()
300
- rescue ::EOFError
301
- raise Rex::Proto::DCERPC::Exceptions::NoResponse
302
- end
303
-
304
- if (raw_response == nil or raw_response.length == 0)
305
- raise Rex::Proto::DCERPC::Exceptions::NoResponse
306
- end
307
-
308
-
309
- self.last_response = Rex::Proto::DCERPC::Response.new(raw_response)
310
-
311
- if self.last_response.type == 3
312
- e = Rex::Proto::DCERPC::Exceptions::Fault.new
313
- e.fault = self.last_response.status
314
- raise e
315
- end
316
-
317
- self.last_response.stub_data
318
- end
319
-
320
- # Process a DCERPC response packet from a socket
321
- def self.read_response(socket, timeout=self.options['read_timeout'])
322
-
323
- data = socket.get_once(-1, timeout)
324
-
325
- # We need at least 10 bytes to find the FragLen
326
- if (! data or data.length() < 10)
327
- return
328
- end
329
-
330
- # Pass the first 10 bytes to the constructor
331
- resp = Rex::Proto::DCERPC::Response.new(data.slice!(0, 10))
332
-
333
- # Something went wrong in the parser...
334
- if (! resp.frag_len)
335
- return resp
336
- end
337
-
338
- # Do we need to read more data?
339
- if (resp.frag_len > (data.length + 10))
340
- begin
341
- data << socket.timed_read(resp.frag_len - data.length - 10, timeout)
342
- rescue Timeout::Error
343
- end
344
- end
345
-
346
- # Still missing some data...
347
- if (data.length() != resp.frag_len - 10)
348
- # TODO: Bubble this up somehow
349
- # $stderr.puts "Truncated DCERPC response :-("
350
- return resp
351
- end
352
-
353
- resp.parse(data)
354
- return resp
355
- end
356
-
357
- end
358
- end
359
- end
360
- end
361
-