librex 0.0.68 → 0.0.70

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (528) hide show
  1. checksums.yaml +15 -0
  2. data/README.markdown +1 -1
  3. data/Rakefile +18 -16
  4. data/lib/rex.rb +14 -10
  5. data/lib/rex/LICENSE +2 -2
  6. data/lib/rex/arch.rb +76 -76
  7. data/lib/rex/arch/sparc.rb +57 -58
  8. data/lib/rex/arch/x86.rb +506 -496
  9. data/lib/rex/assembly/nasm.rb +83 -84
  10. data/lib/rex/compat.rb +228 -173
  11. data/lib/rex/constants.rb +47 -37
  12. data/lib/rex/elfparsey.rb +0 -3
  13. data/lib/rex/elfparsey/elf.rb +107 -110
  14. data/lib/rex/elfparsey/elfbase.rb +244 -247
  15. data/lib/rex/elfparsey/exceptions.rb +0 -3
  16. data/lib/rex/elfscan.rb +0 -3
  17. data/lib/rex/elfscan/scanner.rb +184 -166
  18. data/lib/rex/elfscan/search.rb +35 -38
  19. data/lib/rex/encoder/alpha2.rb +1 -2
  20. data/lib/rex/encoder/alpha2/alpha_mixed.rb +52 -53
  21. data/lib/rex/encoder/alpha2/alpha_upper.rb +62 -63
  22. data/lib/rex/encoder/alpha2/generic.rb +77 -78
  23. data/lib/rex/encoder/alpha2/unicode_mixed.rb +101 -97
  24. data/lib/rex/encoder/alpha2/unicode_upper.rb +106 -107
  25. data/lib/rex/encoder/bloxor/bloxor.rb +326 -0
  26. data/lib/rex/encoder/ndr.rb +68 -68
  27. data/lib/rex/encoder/nonalpha.rb +50 -51
  28. data/lib/rex/encoder/nonupper.rb +50 -51
  29. data/lib/rex/encoder/xdr.rb +78 -78
  30. data/lib/rex/encoder/xor.rb +52 -53
  31. data/lib/rex/encoder/xor/dword.rb +1 -2
  32. data/lib/rex/encoder/xor/dword_additive.rb +1 -2
  33. data/lib/rex/encoders/xor_dword.rb +17 -18
  34. data/lib/rex/encoders/xor_dword_additive.rb +35 -36
  35. data/lib/rex/encoding/xor.rb +0 -1
  36. data/lib/rex/encoding/xor/byte.rb +3 -4
  37. data/lib/rex/encoding/xor/dword.rb +3 -4
  38. data/lib/rex/encoding/xor/dword_additive.rb +72 -73
  39. data/lib/rex/encoding/xor/exceptions.rb +2 -3
  40. data/lib/rex/encoding/xor/generic.rb +129 -130
  41. data/lib/rex/encoding/xor/qword.rb +3 -4
  42. data/lib/rex/encoding/xor/word.rb +3 -4
  43. data/lib/rex/exceptions.rb +100 -101
  44. data/lib/rex/exploitation/cmdstager.rb +3 -3
  45. data/lib/rex/exploitation/cmdstager/base.rb +170 -156
  46. data/lib/rex/exploitation/cmdstager/bourne.rb +105 -0
  47. data/lib/rex/exploitation/cmdstager/debug_asm.rb +110 -113
  48. data/lib/rex/exploitation/cmdstager/debug_write.rb +106 -109
  49. data/lib/rex/exploitation/cmdstager/echo.rb +164 -0
  50. data/lib/rex/exploitation/cmdstager/printf.rb +122 -0
  51. data/lib/rex/exploitation/cmdstager/tftp.rb +34 -27
  52. data/lib/rex/exploitation/cmdstager/vbs.rb +95 -98
  53. data/lib/rex/exploitation/egghunter.rb +359 -346
  54. data/lib/rex/exploitation/encryptjs.rb +60 -60
  55. data/lib/rex/exploitation/heaplib.rb +76 -76
  56. data/lib/rex/exploitation/js.rb +6 -0
  57. data/lib/rex/exploitation/js/detect.rb +69 -0
  58. data/lib/rex/exploitation/js/memory.rb +81 -0
  59. data/lib/rex/exploitation/js/network.rb +84 -0
  60. data/lib/rex/exploitation/js/utils.rb +33 -0
  61. data/lib/rex/exploitation/jsobfu.rb +448 -424
  62. data/lib/rex/exploitation/obfuscatejs.rb +301 -301
  63. data/lib/rex/exploitation/omelet.rb +257 -257
  64. data/lib/rex/exploitation/opcodedb.rb +699 -699
  65. data/lib/rex/exploitation/ropdb.rb +189 -0
  66. data/lib/rex/exploitation/seh.rb +68 -68
  67. data/lib/rex/file.rb +96 -49
  68. data/lib/rex/image_source.rb +0 -3
  69. data/lib/rex/image_source/disk.rb +45 -48
  70. data/lib/rex/image_source/image_source.rb +33 -36
  71. data/lib/rex/image_source/memory.rb +17 -20
  72. data/lib/rex/io/bidirectional_pipe.rb +118 -115
  73. data/lib/rex/io/datagram_abstraction.rb +13 -14
  74. data/lib/rex/io/ring_buffer.rb +273 -273
  75. data/lib/rex/io/stream.rb +284 -284
  76. data/lib/rex/io/stream_abstraction.rb +183 -181
  77. data/lib/rex/io/stream_server.rb +193 -193
  78. data/lib/rex/job_container.rb +167 -167
  79. data/lib/rex/logging.rb +0 -1
  80. data/lib/rex/logging/log_dispatcher.rb +113 -113
  81. data/lib/rex/logging/log_sink.rb +17 -17
  82. data/lib/rex/logging/sinks/flatfile.rb +36 -36
  83. data/lib/rex/logging/sinks/stderr.rb +27 -27
  84. data/lib/rex/mac_oui.rb +16572 -16571
  85. data/lib/rex/machparsey.rb +0 -1
  86. data/lib/rex/machparsey/exceptions.rb +0 -1
  87. data/lib/rex/machparsey/mach.rb +160 -161
  88. data/lib/rex/machparsey/machbase.rb +367 -368
  89. data/lib/rex/machscan.rb +0 -1
  90. data/lib/rex/machscan/scanner.rb +175 -176
  91. data/lib/rex/mime/encoding.rb +17 -0
  92. data/lib/rex/mime/header.rb +58 -58
  93. data/lib/rex/mime/message.rb +140 -137
  94. data/lib/rex/mime/part.rb +41 -12
  95. data/lib/rex/nop/opty2.rb +90 -90
  96. data/lib/rex/nop/opty2_tables.rb +273 -273
  97. data/lib/rex/ole.rb +0 -4
  98. data/lib/rex/ole/clsid.rb +26 -30
  99. data/lib/rex/ole/difat.rb +121 -125
  100. data/lib/rex/ole/directory.rb +205 -209
  101. data/lib/rex/ole/direntry.rb +217 -221
  102. data/lib/rex/ole/fat.rb +79 -83
  103. data/lib/rex/ole/header.rb +178 -182
  104. data/lib/rex/ole/minifat.rb +49 -53
  105. data/lib/rex/ole/propset.rb +113 -117
  106. data/lib/rex/ole/samples/create_ole.rb +8 -9
  107. data/lib/rex/ole/samples/dir.rb +10 -11
  108. data/lib/rex/ole/samples/dump_stream.rb +14 -15
  109. data/lib/rex/ole/samples/ole_info.rb +5 -6
  110. data/lib/rex/ole/storage.rb +372 -376
  111. data/lib/rex/ole/stream.rb +33 -37
  112. data/lib/rex/ole/substorage.rb +20 -24
  113. data/lib/rex/ole/util.rb +137 -141
  114. data/lib/rex/parser/acunetix_nokogiri.rb +398 -398
  115. data/lib/rex/parser/apple_backup_manifestdb.rb +116 -116
  116. data/lib/rex/parser/appscan_nokogiri.rb +359 -359
  117. data/lib/rex/parser/arguments.rb +88 -88
  118. data/lib/rex/parser/burp_session_nokogiri.rb +258 -258
  119. data/lib/rex/parser/ci_nokogiri.rb +184 -184
  120. data/lib/rex/parser/foundstone_nokogiri.rb +334 -333
  121. data/lib/rex/parser/fusionvm_nokogiri.rb +94 -94
  122. data/lib/rex/parser/ini.rb +167 -167
  123. data/lib/rex/parser/ip360_aspl_xml.rb +84 -84
  124. data/lib/rex/parser/ip360_xml.rb +77 -77
  125. data/lib/rex/parser/mbsa_nokogiri.rb +224 -224
  126. data/lib/rex/parser/nessus_xml.rb +100 -100
  127. data/lib/rex/parser/netsparker_xml.rb +89 -75
  128. data/lib/rex/parser/nexpose_raw_nokogiri.rb +677 -677
  129. data/lib/rex/parser/nexpose_simple_nokogiri.rb +322 -322
  130. data/lib/rex/parser/nexpose_xml.rb +105 -105
  131. data/lib/rex/parser/nmap_nokogiri.rb +386 -386
  132. data/lib/rex/parser/nmap_xml.rb +116 -116
  133. data/lib/rex/parser/nokogiri_doc_mixin.rb +223 -221
  134. data/lib/rex/parser/openvas_nokogiri.rb +162 -162
  135. data/lib/rex/parser/outpost24_nokogiri.rb +239 -0
  136. data/lib/rex/parser/retina_xml.rb +90 -90
  137. data/lib/rex/parser/unattend.rb +171 -0
  138. data/lib/rex/parser/wapiti_nokogiri.rb +89 -89
  139. data/lib/rex/payloads/win32/common.rb +14 -14
  140. data/lib/rex/payloads/win32/kernel.rb +36 -36
  141. data/lib/rex/payloads/win32/kernel/common.rb +32 -32
  142. data/lib/rex/payloads/win32/kernel/recovery.rb +27 -27
  143. data/lib/rex/payloads/win32/kernel/stager.rb +170 -170
  144. data/lib/rex/peparsey.rb +0 -3
  145. data/lib/rex/peparsey/exceptions.rb +0 -3
  146. data/lib/rex/peparsey/pe.rb +196 -199
  147. data/lib/rex/peparsey/pe_memdump.rb +35 -38
  148. data/lib/rex/peparsey/pebase.rb +1633 -1652
  149. data/lib/rex/peparsey/section.rb +115 -124
  150. data/lib/rex/pescan.rb +0 -3
  151. data/lib/rex/pescan/analyze.rb +351 -351
  152. data/lib/rex/pescan/scanner.rb +182 -182
  153. data/lib/rex/pescan/search.rb +59 -59
  154. data/lib/rex/platforms/windows.rb +37 -37
  155. data/lib/rex/poly.rb +111 -110
  156. data/lib/rex/poly/block.rb +419 -417
  157. data/lib/rex/poly/machine.rb +12 -0
  158. data/lib/rex/poly/machine/machine.rb +829 -0
  159. data/lib/rex/poly/machine/x86.rb +508 -0
  160. data/lib/rex/poly/register.rb +70 -70
  161. data/lib/rex/poly/register/x86.rb +22 -22
  162. data/lib/rex/post.rb +0 -1
  163. data/lib/rex/post/dir.rb +35 -36
  164. data/lib/rex/post/file.rb +140 -141
  165. data/lib/rex/post/file_stat.rb +198 -199
  166. data/lib/rex/post/io.rb +167 -168
  167. data/lib/rex/post/meterpreter.rb +1 -1
  168. data/lib/rex/post/meterpreter/channel.rb +389 -390
  169. data/lib/rex/post/meterpreter/channel_container.rb +33 -34
  170. data/lib/rex/post/meterpreter/channels/pool.rb +129 -130
  171. data/lib/rex/post/meterpreter/channels/pools/file.rb +35 -36
  172. data/lib/rex/post/meterpreter/channels/pools/stream_pool.rb +72 -73
  173. data/lib/rex/post/meterpreter/channels/stream.rb +62 -63
  174. data/lib/rex/post/meterpreter/client.rb +442 -436
  175. data/lib/rex/post/meterpreter/client_core.rb +326 -310
  176. data/lib/rex/post/meterpreter/dependencies.rb +0 -1
  177. data/lib/rex/post/meterpreter/extension.rb +12 -13
  178. data/lib/rex/post/meterpreter/extensions/espia/espia.rb +35 -36
  179. data/lib/rex/post/meterpreter/extensions/extapi/adsi/adsi.rb +71 -0
  180. data/lib/rex/post/meterpreter/extensions/extapi/clipboard/clipboard.rb +169 -0
  181. data/lib/rex/post/meterpreter/extensions/extapi/extapi.rb +45 -0
  182. data/lib/rex/post/meterpreter/extensions/extapi/service/service.rb +104 -0
  183. data/lib/rex/post/meterpreter/extensions/extapi/tlv.rb +77 -0
  184. data/lib/rex/post/meterpreter/extensions/extapi/window/window.rb +56 -0
  185. data/lib/rex/post/meterpreter/extensions/extapi/wmi/wmi.rb +75 -0
  186. data/lib/rex/post/meterpreter/extensions/incognito/incognito.rb +70 -71
  187. data/lib/rex/post/meterpreter/extensions/kiwi/kiwi.rb +361 -0
  188. data/lib/rex/post/meterpreter/extensions/kiwi/tlv.rb +76 -0
  189. data/lib/rex/post/meterpreter/extensions/lanattacks/dhcp/dhcp.rb +78 -0
  190. data/lib/rex/post/meterpreter/extensions/lanattacks/lanattacks.rb +22 -78
  191. data/lib/rex/post/meterpreter/extensions/lanattacks/tftp/tftp.rb +49 -0
  192. data/lib/rex/post/meterpreter/extensions/lanattacks/tlv.rb +4 -4
  193. data/lib/rex/post/meterpreter/extensions/mimikatz/mimikatz.rb +128 -0
  194. data/lib/rex/post/meterpreter/extensions/mimikatz/tlv.rb +16 -0
  195. data/lib/rex/post/meterpreter/extensions/networkpug/networkpug.rb +38 -39
  196. data/lib/rex/post/meterpreter/extensions/networkpug/tlv.rb +1 -1
  197. data/lib/rex/post/meterpreter/extensions/priv/fs.rb +95 -96
  198. data/lib/rex/post/meterpreter/extensions/priv/passwd.rb +39 -40
  199. data/lib/rex/post/meterpreter/extensions/priv/priv.rb +80 -85
  200. data/lib/rex/post/meterpreter/extensions/sniffer/sniffer.rb +94 -95
  201. data/lib/rex/post/meterpreter/extensions/stdapi/constants.rb +207 -147
  202. data/lib/rex/post/meterpreter/extensions/stdapi/fs/dir.rb +258 -259
  203. data/lib/rex/post/meterpreter/extensions/stdapi/fs/file.rb +366 -301
  204. data/lib/rex/post/meterpreter/extensions/stdapi/fs/file_stat.rb +72 -73
  205. data/lib/rex/post/meterpreter/extensions/stdapi/fs/io.rb +24 -25
  206. data/lib/rex/post/meterpreter/extensions/stdapi/net/arp.rb +59 -0
  207. data/lib/rex/post/meterpreter/extensions/stdapi/net/config.rb +227 -149
  208. data/lib/rex/post/meterpreter/extensions/stdapi/net/interface.rb +107 -108
  209. data/lib/rex/post/meterpreter/extensions/stdapi/net/netstat.rb +97 -0
  210. data/lib/rex/post/meterpreter/extensions/stdapi/net/resolve.rb +106 -0
  211. data/lib/rex/post/meterpreter/extensions/stdapi/net/route.rb +41 -42
  212. data/lib/rex/post/meterpreter/extensions/stdapi/net/socket.rb +102 -101
  213. data/lib/rex/post/meterpreter/extensions/stdapi/net/socket_subsystem/tcp_client_channel.rb +151 -152
  214. data/lib/rex/post/meterpreter/extensions/stdapi/net/socket_subsystem/tcp_server_channel.rb +142 -142
  215. data/lib/rex/post/meterpreter/extensions/stdapi/net/socket_subsystem/udp_channel.rb +185 -185
  216. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/api_constants.rb +38118 -38117
  217. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/buffer_item.rb +7 -7
  218. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_advapi32.rb +2086 -2084
  219. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_crypt32.rb +15 -15
  220. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_iphlpapi.rb +80 -80
  221. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_kernel32.rb +3835 -3833
  222. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_netapi32.rb +84 -28
  223. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_ntdll.rb +151 -137
  224. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_shell32.rb +15 -6
  225. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_user32.rb +3155 -3155
  226. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_version.rb +41 -0
  227. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_wlanapi.rb +70 -70
  228. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_wldap32.rb +128 -0
  229. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_ws2_32.rb +596 -596
  230. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/dll.rb +310 -301
  231. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/dll_function.rb +71 -61
  232. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/dll_helper.rb +100 -100
  233. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/dll_wrapper.rb +14 -14
  234. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/mock_magic.rb +488 -488
  235. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/multicall.rb +273 -264
  236. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/platform_util.rb +5 -5
  237. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/railgun.rb +240 -238
  238. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/tlv.rb +17 -15
  239. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/type/pointer_util.rb +61 -61
  240. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/util.rb +654 -635
  241. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/win_const_manager.rb +49 -49
  242. data/lib/rex/post/meterpreter/extensions/stdapi/stdapi.rb +103 -102
  243. data/lib/rex/post/meterpreter/extensions/stdapi/sys/config.rb +98 -68
  244. data/lib/rex/post/meterpreter/extensions/stdapi/sys/event_log.rb +165 -166
  245. data/lib/rex/post/meterpreter/extensions/stdapi/sys/event_log_subsystem/event_record.rb +16 -17
  246. data/lib/rex/post/meterpreter/extensions/stdapi/sys/power.rb +34 -36
  247. data/lib/rex/post/meterpreter/extensions/stdapi/sys/process.rb +363 -364
  248. data/lib/rex/post/meterpreter/extensions/stdapi/sys/process_subsystem/image.rb +102 -103
  249. data/lib/rex/post/meterpreter/extensions/stdapi/sys/process_subsystem/io.rb +28 -29
  250. data/lib/rex/post/meterpreter/extensions/stdapi/sys/process_subsystem/memory.rb +303 -304
  251. data/lib/rex/post/meterpreter/extensions/stdapi/sys/process_subsystem/thread.rb +113 -114
  252. data/lib/rex/post/meterpreter/extensions/stdapi/sys/registry.rb +260 -261
  253. data/lib/rex/post/meterpreter/extensions/stdapi/sys/registry_subsystem/registry_key.rb +165 -166
  254. data/lib/rex/post/meterpreter/extensions/stdapi/sys/registry_subsystem/registry_value.rb +69 -70
  255. data/lib/rex/post/meterpreter/extensions/stdapi/sys/registry_subsystem/remote_registry_key.rb +160 -161
  256. data/lib/rex/post/meterpreter/extensions/stdapi/sys/thread.rb +143 -144
  257. data/lib/rex/post/meterpreter/extensions/stdapi/tlv.rb +29 -12
  258. data/lib/rex/post/meterpreter/extensions/stdapi/ui.rb +230 -231
  259. data/lib/rex/post/meterpreter/extensions/stdapi/webcam/webcam.rb +181 -44
  260. data/lib/rex/post/meterpreter/inbound_packet_handler.rb +12 -13
  261. data/lib/rex/post/meterpreter/object_aliases.rb +56 -57
  262. data/lib/rex/post/meterpreter/packet.rb +591 -592
  263. data/lib/rex/post/meterpreter/packet_dispatcher.rb +506 -496
  264. data/lib/rex/post/meterpreter/packet_parser.rb +72 -73
  265. data/lib/rex/post/meterpreter/packet_response_waiter.rb +56 -57
  266. data/lib/rex/post/meterpreter/ui/console.rb +112 -112
  267. data/lib/rex/post/meterpreter/ui/console/command_dispatcher.rb +53 -53
  268. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/core.rb +911 -854
  269. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/espia.rb +86 -86
  270. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/extapi.rb +65 -0
  271. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/extapi/adsi.rb +198 -0
  272. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/extapi/clipboard.rb +444 -0
  273. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/extapi/service.rb +199 -0
  274. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/extapi/window.rb +118 -0
  275. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/extapi/wmi.rb +108 -0
  276. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/incognito.rb +220 -220
  277. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/kiwi.rb +509 -0
  278. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/lanattacks.rb +60 -0
  279. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/lanattacks/dhcp.rb +254 -0
  280. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/lanattacks/tftp.rb +159 -0
  281. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/mimikatz.rb +182 -0
  282. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/networkpug.rb +173 -173
  283. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/priv.rb +40 -40
  284. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/priv/elevate.rb +75 -77
  285. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/priv/passwd.rb +30 -30
  286. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/priv/timestomp.rb +105 -105
  287. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/sniffer.rb +182 -182
  288. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/stdapi.rb +37 -37
  289. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/stdapi/fs.rb +504 -482
  290. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/stdapi/net.rb +401 -330
  291. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/stdapi/sys.rb +883 -581
  292. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/stdapi/ui.rb +296 -299
  293. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/stdapi/webcam.rb +320 -153
  294. data/lib/rex/post/meterpreter/ui/console/interactive_channel.rb +78 -78
  295. data/lib/rex/post/permission.rb +0 -1
  296. data/lib/rex/post/process.rb +39 -40
  297. data/lib/rex/post/thread.rb +41 -42
  298. data/lib/rex/post/ui.rb +35 -36
  299. data/lib/rex/proto/addp.rb +218 -0
  300. data/lib/rex/proto/dcerpc/client.rb +344 -344
  301. data/lib/rex/proto/dcerpc/exceptions.rb +128 -128
  302. data/lib/rex/proto/dcerpc/handle.rb +32 -32
  303. data/lib/rex/proto/dcerpc/ndr.rb +56 -56
  304. data/lib/rex/proto/dcerpc/packet.rb +249 -245
  305. data/lib/rex/proto/dcerpc/response.rb +170 -170
  306. data/lib/rex/proto/dcerpc/uuid.rb +65 -65
  307. data/lib/rex/proto/dcerpc/wdscp.rb +3 -0
  308. data/lib/rex/proto/dcerpc/wdscp/constants.rb +89 -0
  309. data/lib/rex/proto/dcerpc/wdscp/packet.rb +94 -0
  310. data/lib/rex/proto/dhcp.rb +0 -1
  311. data/lib/rex/proto/dhcp/constants.rb +0 -1
  312. data/lib/rex/proto/dhcp/server.rb +303 -304
  313. data/lib/rex/proto/drda/constants.rb +1 -1
  314. data/lib/rex/proto/drda/packet.rb +186 -186
  315. data/lib/rex/proto/drda/utils.rb +104 -104
  316. data/lib/rex/proto/http.rb +1 -0
  317. data/lib/rex/proto/http/client.rb +692 -820
  318. data/lib/rex/proto/http/client_request.rb +472 -0
  319. data/lib/rex/proto/http/handler.rb +25 -25
  320. data/lib/rex/proto/http/handler/erb.rb +104 -104
  321. data/lib/rex/proto/http/handler/proc.rb +37 -37
  322. data/lib/rex/proto/http/header.rb +149 -149
  323. data/lib/rex/proto/http/packet.rb +388 -382
  324. data/lib/rex/proto/http/request.rb +332 -335
  325. data/lib/rex/proto/http/response.rb +132 -72
  326. data/lib/rex/proto/http/server.rb +348 -338
  327. data/lib/rex/proto/iax2/call.rb +310 -310
  328. data/lib/rex/proto/iax2/client.rb +197 -197
  329. data/lib/rex/proto/iax2/codecs/alaw.rb +4 -4
  330. data/lib/rex/proto/iax2/codecs/mulaw.rb +4 -4
  331. data/lib/rex/proto/ipmi.rb +57 -0
  332. data/lib/rex/proto/ipmi/channel_auth_reply.rb +88 -0
  333. data/lib/rex/proto/ipmi/open_session_reply.rb +35 -0
  334. data/lib/rex/proto/ipmi/rakp2.rb +35 -0
  335. data/lib/rex/proto/ipmi/utils.rb +125 -0
  336. data/lib/rex/proto/natpmp.rb +1 -5
  337. data/lib/rex/proto/natpmp/constants.rb +4 -4
  338. data/lib/rex/proto/natpmp/packet.rb +25 -25
  339. data/lib/rex/proto/ntlm/base.rb +271 -271
  340. data/lib/rex/proto/ntlm/constants.rb +61 -61
  341. data/lib/rex/proto/ntlm/crypt.rb +348 -352
  342. data/lib/rex/proto/ntlm/exceptions.rb +3 -3
  343. data/lib/rex/proto/ntlm/message.rb +468 -471
  344. data/lib/rex/proto/ntlm/utils.rb +746 -746
  345. data/lib/rex/proto/pjl.rb +30 -0
  346. data/lib/rex/proto/pjl/client.rb +162 -0
  347. data/lib/rex/proto/proxy/socks4a.rb +440 -440
  348. data/lib/rex/proto/rfb.rb +1 -8
  349. data/lib/rex/proto/rfb/cipher.rb +46 -49
  350. data/lib/rex/proto/rfb/client.rb +179 -182
  351. data/lib/rex/proto/rfb/constants.rb +18 -21
  352. data/lib/rex/proto/smb/client.rb +1954 -1843
  353. data/lib/rex/proto/smb/constants.rb +533 -516
  354. data/lib/rex/proto/smb/crypt.rb +21 -21
  355. data/lib/rex/proto/smb/evasions.rb +43 -43
  356. data/lib/rex/proto/smb/exceptions.rb +791 -791
  357. data/lib/rex/proto/smb/simpleclient.rb +142 -286
  358. data/lib/rex/proto/smb/simpleclient/open_file.rb +106 -0
  359. data/lib/rex/proto/smb/simpleclient/open_pipe.rb +57 -0
  360. data/lib/rex/proto/smb/utils.rb +81 -81
  361. data/lib/rex/proto/sunrpc/client.rb +158 -158
  362. data/lib/rex/proto/tftp.rb +0 -1
  363. data/lib/rex/proto/tftp/client.rb +289 -289
  364. data/lib/rex/proto/tftp/constants.rb +9 -10
  365. data/lib/rex/proto/tftp/server.rb +466 -467
  366. data/lib/rex/random_identifier_generator.rb +176 -0
  367. data/lib/rex/registry.rb +1 -1
  368. data/lib/rex/registry/hive.rb +88 -88
  369. data/lib/rex/registry/lfkey.rb +25 -25
  370. data/lib/rex/registry/nodekey.rb +30 -30
  371. data/lib/rex/registry/regf.rb +10 -10
  372. data/lib/rex/registry/valuekey.rb +43 -43
  373. data/lib/rex/registry/valuelist.rb +13 -13
  374. data/lib/rex/ropbuilder/rop.rb +254 -253
  375. data/lib/rex/script.rb +21 -22
  376. data/lib/rex/script/base.rb +51 -50
  377. data/lib/rex/script/meterpreter.rb +2 -2
  378. data/lib/rex/service.rb +24 -24
  379. data/lib/rex/service_manager.rb +132 -132
  380. data/lib/rex/services/local_relay.rb +398 -398
  381. data/lib/rex/socket.rb +758 -763
  382. data/lib/rex/socket/comm.rb +95 -95
  383. data/lib/rex/socket/comm/local.rb +507 -440
  384. data/lib/rex/socket/ip.rb +118 -118
  385. data/lib/rex/socket/parameters.rb +351 -350
  386. data/lib/rex/socket/range_walker.rb +445 -368
  387. data/lib/rex/socket/ssl_tcp.rb +323 -317
  388. data/lib/rex/socket/ssl_tcp_server.rb +173 -158
  389. data/lib/rex/socket/subnet_walker.rb +48 -48
  390. data/lib/rex/socket/switch_board.rb +259 -259
  391. data/lib/rex/socket/tcp.rb +58 -56
  392. data/lib/rex/socket/tcp_server.rb +42 -42
  393. data/lib/rex/socket/udp.rb +152 -152
  394. data/lib/rex/sslscan/result.rb +200 -0
  395. data/lib/rex/sslscan/scanner.rb +205 -0
  396. data/lib/rex/struct2.rb +0 -1
  397. data/lib/rex/struct2/c_struct.rb +162 -163
  398. data/lib/rex/struct2/c_struct_template.rb +21 -22
  399. data/lib/rex/struct2/constant.rb +6 -7
  400. data/lib/rex/struct2/element.rb +30 -31
  401. data/lib/rex/struct2/generic.rb +60 -61
  402. data/lib/rex/struct2/restraint.rb +40 -41
  403. data/lib/rex/struct2/s_string.rb +60 -61
  404. data/lib/rex/struct2/s_struct.rb +97 -98
  405. data/lib/rex/sync.rb +0 -1
  406. data/lib/rex/sync/event.rb +62 -72
  407. data/lib/rex/sync/read_write_lock.rb +149 -149
  408. data/lib/rex/sync/ref.rb +42 -42
  409. data/lib/rex/sync/thread_safe.rb +59 -59
  410. data/lib/rex/text.rb +1803 -1315
  411. data/lib/rex/thread_factory.rb +25 -25
  412. data/lib/rex/time.rb +44 -44
  413. data/lib/rex/transformer.rb +91 -91
  414. data/lib/rex/ui/interactive.rb +265 -265
  415. data/lib/rex/ui/output.rb +66 -60
  416. data/lib/rex/ui/progress_tracker.rb +79 -79
  417. data/lib/rex/ui/subscriber.rb +144 -134
  418. data/lib/rex/ui/text/color.rb +76 -76
  419. data/lib/rex/ui/text/dispatcher_shell.rb +512 -505
  420. data/lib/rex/ui/text/input.rb +96 -96
  421. data/lib/rex/ui/text/input/buffer.rb +58 -58
  422. data/lib/rex/ui/text/input/readline.rb +114 -114
  423. data/lib/rex/ui/text/input/socket.rb +77 -77
  424. data/lib/rex/ui/text/input/stdio.rb +24 -24
  425. data/lib/rex/ui/text/irb_shell.rb +45 -41
  426. data/lib/rex/ui/text/output.rb +64 -60
  427. data/lib/rex/ui/text/output/buffer.rb +42 -42
  428. data/lib/rex/ui/text/output/buffer/stdout.rb +25 -0
  429. data/lib/rex/ui/text/output/file.rb +24 -24
  430. data/lib/rex/ui/text/output/socket.rb +24 -24
  431. data/lib/rex/ui/text/output/stdio.rb +29 -29
  432. data/lib/rex/ui/text/output/tee.rb +36 -36
  433. data/lib/rex/ui/text/progress_tracker.rb +37 -37
  434. data/lib/rex/ui/text/shell.rb +371 -361
  435. data/lib/rex/ui/text/table.rb +320 -284
  436. data/lib/rex/zip.rb +0 -1
  437. data/lib/rex/zip/archive.rb +115 -94
  438. data/lib/rex/zip/blocks.rb +101 -100
  439. data/lib/rex/zip/entry.rb +108 -99
  440. data/lib/rex/zip/jar.rb +261 -206
  441. data/lib/rex/zip/samples/comment.rb +1 -2
  442. data/lib/rex/zip/samples/mkwar.rb +12 -13
  443. data/lib/rex/zip/samples/mkzip.rb +1 -2
  444. data/lib/rex/zip/samples/recursive.rb +29 -30
  445. metadata +424 -446
  446. data/lib/rex/arch/sparc.rb.ut.rb +0 -19
  447. data/lib/rex/arch/x86.rb.ut.rb +0 -94
  448. data/lib/rex/assembly/nasm.rb.ut.rb +0 -23
  449. data/lib/rex/encoder/ndr.rb.ut.rb +0 -45
  450. data/lib/rex/encoder/xdr.rb.ut.rb +0 -30
  451. data/lib/rex/encoders/xor_dword_additive.rb.ut.rb +0 -13
  452. data/lib/rex/encoding/xor.rb.ts.rb +0 -15
  453. data/lib/rex/encoding/xor/byte.rb.ut.rb +0 -22
  454. data/lib/rex/encoding/xor/dword.rb.ut.rb +0 -16
  455. data/lib/rex/encoding/xor/dword_additive.rb.ut.rb +0 -16
  456. data/lib/rex/encoding/xor/generic.rb.ut.rb +0 -121
  457. data/lib/rex/encoding/xor/word.rb.ut.rb +0 -14
  458. data/lib/rex/exceptions.rb.ut.rb +0 -45
  459. data/lib/rex/exploitation/egghunter.rb.ut.rb +0 -28
  460. data/lib/rex/exploitation/javascriptosdetect.js +0 -1014
  461. data/lib/rex/exploitation/javascriptosdetect.rb +0 -43
  462. data/lib/rex/exploitation/omelet.rb.ut.rb +0 -27
  463. data/lib/rex/exploitation/opcodedb.rb.ut.rb +0 -280
  464. data/lib/rex/exploitation/seh.rb.ut.rb +0 -20
  465. data/lib/rex/file.rb.ut.rb +0 -17
  466. data/lib/rex/io/ring_buffer.rb.ut.rb +0 -135
  467. data/lib/rex/nop/opty2.rb.ut.rb +0 -24
  468. data/lib/rex/parser/arguments.rb.ut.rb +0 -68
  469. data/lib/rex/parser/ini.rb.ut.rb +0 -30
  470. data/lib/rex/post/meterpreter/extensions/stdapi/railgun.rb.ts.rb +0 -18
  471. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/api_constants.rb.ut.rb +0 -39
  472. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/buffer_item.rb.ut.rb +0 -37
  473. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/dll.rb.ut.rb +0 -52
  474. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/dll_function.rb.ut.rb +0 -43
  475. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/dll_helper.rb.ut.rb +0 -128
  476. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/dll_wrapper.rb.ut.rb +0 -64
  477. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/platform_util.rb.ut.rb +0 -29
  478. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/railgun.rb.ut.rb +0 -155
  479. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/type/pointer_util.rb.ut.rb +0 -128
  480. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/win_const_manager.rb.ut.rb +0 -124
  481. data/lib/rex/proto.rb.ts.rb +0 -9
  482. data/lib/rex/proto/dcerpc.rb.ts.rb +0 -10
  483. data/lib/rex/proto/dcerpc/client.rb.ut.rb +0 -492
  484. data/lib/rex/proto/dcerpc/handle.rb.ut.rb +0 -86
  485. data/lib/rex/proto/dcerpc/ndr.rb.ut.rb +0 -42
  486. data/lib/rex/proto/dcerpc/packet.rb.ut.rb +0 -57
  487. data/lib/rex/proto/dcerpc/response.rb.ut.rb +0 -16
  488. data/lib/rex/proto/dcerpc/uuid.rb.ut.rb +0 -47
  489. data/lib/rex/proto/drda.rb.ts.rb +0 -18
  490. data/lib/rex/proto/drda/constants.rb.ut.rb +0 -24
  491. data/lib/rex/proto/drda/packet.rb.ut.rb +0 -110
  492. data/lib/rex/proto/drda/utils.rb.ut.rb +0 -85
  493. data/lib/rex/proto/http.rb.ts.rb +0 -13
  494. data/lib/rex/proto/http/client.rb.ut.rb +0 -96
  495. data/lib/rex/proto/http/handler/erb.rb.ut.rb +0 -22
  496. data/lib/rex/proto/http/handler/erb.rb.ut.rb.rhtml +0 -1
  497. data/lib/rex/proto/http/handler/proc.rb.ut.rb +0 -25
  498. data/lib/rex/proto/http/header.rb.ut.rb +0 -47
  499. data/lib/rex/proto/http/packet.rb.ut.rb +0 -166
  500. data/lib/rex/proto/http/request.rb.ut.rb +0 -215
  501. data/lib/rex/proto/http/response.rb.ut.rb +0 -150
  502. data/lib/rex/proto/http/server.rb.ut.rb +0 -80
  503. data/lib/rex/proto/ntlm.rb.ut.rb +0 -181
  504. data/lib/rex/proto/rfb.rb.ut.rb +0 -40
  505. data/lib/rex/proto/smb.rb.ts.rb +0 -9
  506. data/lib/rex/proto/smb/client.rb.ut.rb +0 -224
  507. data/lib/rex/proto/smb/constants.rb.ut.rb +0 -19
  508. data/lib/rex/proto/smb/simpleclient.rb.ut.rb +0 -129
  509. data/lib/rex/proto/smb/utils.rb.ut.rb +0 -21
  510. data/lib/rex/proto/tftp/server.rb.ut.rb +0 -29
  511. data/lib/rex/service_manager.rb.ut.rb +0 -33
  512. data/lib/rex/socket.rb.ut.rb +0 -108
  513. data/lib/rex/socket/comm/local.rb.ut.rb +0 -76
  514. data/lib/rex/socket/parameters.rb.ut.rb +0 -52
  515. data/lib/rex/socket/range_walker.rb.ut.rb +0 -56
  516. data/lib/rex/socket/ssl_tcp.rb.ut.rb +0 -40
  517. data/lib/rex/socket/ssl_tcp_server.rb.ut.rb +0 -62
  518. data/lib/rex/socket/subnet_walker.rb.ut.rb +0 -29
  519. data/lib/rex/socket/switch_board.rb.ut.rb +0 -53
  520. data/lib/rex/socket/tcp.rb.ut.rb +0 -65
  521. data/lib/rex/socket/tcp_server.rb.ut.rb +0 -45
  522. data/lib/rex/socket/udp.rb.ut.rb +0 -45
  523. data/lib/rex/test.rb +0 -36
  524. data/lib/rex/text.rb.ut.rb +0 -193
  525. data/lib/rex/transformer.rb.ut.rb +0 -39
  526. data/lib/rex/ui/text/color.rb.ut.rb +0 -19
  527. data/lib/rex/ui/text/progress_tracker.rb.ut.rb +0 -35
  528. data/lib/rex/ui/text/table.rb.ut.rb +0 -56
@@ -14,488 +14,510 @@ module Ui
14
14
  ###
15
15
  class Console::CommandDispatcher::Stdapi::Fs
16
16
 
17
- Klass = Console::CommandDispatcher::Stdapi::Fs
18
-
19
- include Console::CommandDispatcher
20
-
21
- #
22
- # Options for the download command.
23
- #
24
- @@download_opts = Rex::Parser::Arguments.new(
25
- "-h" => [ false, "Help banner." ],
26
- "-r" => [ false, "Download recursively." ])
27
- #
28
- # Options for the upload command.
29
- #
30
- @@upload_opts = Rex::Parser::Arguments.new(
31
- "-h" => [ false, "Help banner." ],
32
- "-r" => [ false, "Upload recursively." ])
33
-
34
- #
35
- # List of supported commands.
36
- #
37
- def commands
38
- all = {
39
- "cat" => "Read the contents of a file to the screen",
40
- "cd" => "Change directory",
41
- "del" => "Delete the specified file",
42
- "download" => "Download a file or directory",
43
- "edit" => "Edit a file",
44
- "getlwd" => "Print local working directory",
45
- "getwd" => "Print working directory",
46
- "lcd" => "Change local working directory",
47
- "lpwd" => "Print local working directory",
48
- "ls" => "List files",
49
- "mkdir" => "Make directory",
50
- "pwd" => "Print working directory",
51
- "rm" => "Delete the specified file",
52
- "rmdir" => "Remove directory",
53
- "search" => "Search for files",
54
- "upload" => "Upload a file or directory",
55
- }
56
-
57
- reqs = {
58
- "cat" => [ ],
59
- "cd" => [ "stdapi_fs_chdir" ],
60
- "del" => [ "stdapi_fs_rm" ],
61
- "download" => [ ],
62
- "edit" => [ ],
63
- "getlwd" => [ ],
64
- "getwd" => [ "stdapi_fs_getwd" ],
65
- "lcd" => [ ],
66
- "lpwd" => [ ],
67
- "ls" => [ "stdapi_fs_stat", "stdapi_fs_ls" ],
68
- "mkdir" => [ "stdapi_fs_mkdir" ],
69
- "pwd" => [ "stdapi_fs_getwd" ],
70
- "rmdir" => [ "stdapi_fs_delete_dir" ],
71
- "rm" => [ "stdapi_fs_delete_file" ],
72
- "search" => [ "stdapi_fs_search" ],
73
- "upload" => [ ],
74
- }
75
-
76
- all.delete_if do |cmd, desc|
77
- del = false
78
- reqs[cmd].each do |req|
79
- next if client.commands.include? req
80
- del = true
81
- break
82
- end
83
-
84
- del
85
- end
86
-
87
- all
88
- end
89
-
90
- #
91
- # Name for this dispatcher.
92
- #
93
- def name
94
- "Stdapi: File system"
95
- end
96
-
97
- #
98
- # Search for files.
99
- #
100
- def cmd_search( *args )
101
-
102
- root = nil
103
- glob = nil
104
- recurse = true
105
-
106
- opts = Rex::Parser::Arguments.new(
107
- "-h" => [ false, "Help Banner." ],
108
- "-d" => [ true, "The directory/drive to begin searching from. Leave empty to search all drives. (Default: #{root})" ],
109
- "-f" => [ true, "The file pattern glob to search for. (e.g. *secret*.doc?)" ],
110
- "-r" => [ true, "Recursivly search sub directories. (Default: #{recurse})" ]
111
- )
112
-
113
- opts.parse(args) { | opt, idx, val |
114
- case opt
115
- when "-h"
116
- print_line( "Usage: search [-d dir] [-r recurse] -f pattern" )
117
- print_line( "Search for files." )
118
- print_line( opts.usage )
119
- return
120
- when "-d"
121
- root = val
122
- when "-f"
123
- glob = val
124
- when "-r"
125
- recurse = false if( val =~ /^(f|n|0)/i )
126
- end
127
- }
128
-
129
- if( not glob )
130
- print_error( "You must specify a valid file glob to search for, e.g. >search -f *.doc" )
131
- return
132
- end
133
-
134
- files = client.fs.file.search( root, glob, recurse )
135
-
136
- if( not files.empty? )
137
- print_line( "Found #{files.length} result#{ files.length > 1 ? 's' : '' }..." )
138
- files.each do | file |
139
- if( file['size'] > 0 )
140
- print( " #{file['path']}#{ file['path'].empty? ? '' : '\\' }#{file['name']} (#{file['size']} bytes)\n" )
141
- else
142
- print( " #{file['path']}#{ file['path'].empty? ? '' : '\\' }#{file['name']}\n" )
143
- end
144
- end
145
- else
146
- print_line( "No files matching your search were found." )
147
- end
148
-
149
- end
150
-
151
- #
152
- # Reads the contents of a file and prints them to the screen.
153
- #
154
- def cmd_cat(*args)
155
- if (args.length == 0)
156
- print_line("Usage: cat file")
157
- return true
158
- end
159
-
160
- if (client.fs.file.stat(args[0]).directory?)
161
- print_error("#{args[0]} is a directory")
162
- else
163
- fd = client.fs.file.new(args[0], "rb")
164
-
165
- until fd.eof?
166
- print(fd.read)
167
- end
168
-
169
- fd.close
170
- end
171
-
172
- true
173
- end
174
-
175
- #
176
- # Change the working directory.
177
- #
178
- def cmd_cd(*args)
179
- if (args.length == 0)
180
- print_line("Usage: cd directory")
181
- return true
182
- end
183
- if args[0] =~ /\%(\w*)\%/
184
- client.fs.dir.chdir(client.fs.file.expand_path(args[0].upcase))
185
- else
186
- client.fs.dir.chdir(args[0])
187
- end
188
-
189
- return true
190
- end
191
-
192
- #
193
- # Change the local working directory.
194
- #
195
- def cmd_lcd(*args)
196
- if (args.length == 0)
197
- print_line("Usage: lcd directory")
198
- return true
199
- end
200
-
201
- ::Dir.chdir(args[0])
202
-
203
- return true
204
- end
205
-
206
- #
207
- # Delete the specified file.
208
- #
209
- def cmd_rm(*args)
210
- if (args.length == 0)
211
- print_line("Usage: rm file")
212
- return true
213
- end
214
-
215
- client.fs.file.rm(args[0])
216
-
217
- return true
218
- end
219
-
220
- alias :cmd_del :cmd_rm
221
-
222
- def cmd_download_help
223
- print_line "Usage: download [options] src1 src2 src3 ... destination"
224
- print_line
225
- print_line "Downloads remote files and directories to the local machine."
226
- print_line @@download_opts.usage
227
- end
228
-
229
- #
230
- # Downloads a file or directory from the remote machine to the local
231
- # machine.
232
- #
233
- def cmd_download(*args)
234
- if (args.empty? or args.include? "-h")
235
- cmd_download_help
236
- return true
237
- end
238
-
239
- recursive = false
240
- src_items = []
241
- last = nil
242
- dest = nil
243
-
244
- @@download_opts.parse(args) { |opt, idx, val|
245
- case opt
246
- when "-r"
247
- recursive = true
248
- when nil
249
- src_items << last if (last)
250
- last = val
251
- end
252
- }
253
-
254
- # No files given, nothing to do
255
- if not last
256
- cmd_download_help
257
- return true
258
- end
259
-
260
- # Source and destination will be the same
261
- if src_items.empty?
262
- src_items << last
263
- # Use the basename of the remote filename so we don't end up with
264
- # a file named c:\\boot.ini in linux
265
- dest = ::Rex::Post::Meterpreter::Extensions::Stdapi::Fs::File.basename(last)
266
- else
267
- dest = last
268
- end
269
-
270
- # Go through each source item and download them
271
- src_items.each { |src|
272
- stat = client.fs.file.stat(src)
273
-
274
- if (stat.directory?)
275
- client.fs.dir.download(dest, src, recursive, true) { |step, src, dst|
276
- print_status("#{step.ljust(11)}: #{src} -> #{dst}")
277
- client.framework.events.on_session_download(client, src, dest) if msf_loaded?
278
- }
279
- elsif (stat.file?)
280
- client.fs.file.download(dest, src) { |step, src, dst|
281
- print_status("#{step.ljust(11)}: #{src} -> #{dst}")
282
- client.framework.events.on_session_download(client, src, dest) if msf_loaded?
283
- }
284
- end
285
- }
286
-
287
- return true
288
- end
289
-
290
- #
291
- # Downloads a file to a temporary file, spawns and editor, and then uploads
292
- # the contents to the remote machine after completion.
293
- #
294
- def cmd_edit(*args)
295
- if (args.length == 0)
296
- print_line("Usage: edit file")
297
- return true
298
- end
299
-
300
- # Get a temporary file path
301
- meterp_temp = Tempfile.new('meterp')
302
- meterp_temp.binmode
303
- temp_path = meterp_temp.path
304
-
305
- begin
306
- # Download the remote file to the temporary file
307
- client.fs.file.download_file(temp_path, args[0])
308
- rescue RequestError => re
309
- # If the file doesn't exist, then it's okay. Otherwise, throw the
310
- # error.
311
- if re.result != 2
312
- raise $!
313
- end
314
- end
315
-
316
- # Spawn the editor (default to vi)
317
- editor = Rex::Compat.getenv('EDITOR') || 'vi'
318
-
319
- # If it succeeds, upload it to the remote side.
320
- if (system("#{editor} #{temp_path}") == true)
321
- client.fs.file.upload_file(args[0], temp_path)
322
- end
323
-
324
- # Get rid of that pesky temporary file
325
- temp_path.close(true)
326
- end
327
-
328
- #
329
- # Display the local working directory.
330
- #
331
- def cmd_lpwd(*args)
332
- print_line(::Dir.pwd)
333
- return true
334
- end
335
-
336
- alias cmd_getlwd cmd_lpwd
337
-
338
- #
339
- # Lists files
340
- #
341
- # TODO: make this more useful
342
- #
343
- def cmd_ls(*args)
344
- path = args[0] || client.fs.dir.getwd
345
- tbl = Rex::Ui::Text::Table.new(
346
- 'Header' => "Listing: #{path}",
347
- 'SortIndex' => 4,
348
- 'Columns' =>
349
- [
350
- 'Mode',
351
- 'Size',
352
- 'Type',
353
- 'Last modified',
354
- 'Name',
355
- ])
356
-
357
- items = 0
358
- stat = client.fs.file.stat(path)
359
- if stat.directory?
360
- # Enumerate each item...
361
- # No need to sort as Table will do it for us
362
- client.fs.dir.entries_with_info(path).each { |p|
363
-
364
- tbl <<
365
- [
366
- p['StatBuf'] ? p['StatBuf'].prettymode : '',
367
- p['StatBuf'] ? p['StatBuf'].size : '',
368
- p['StatBuf'] ? p['StatBuf'].ftype[0,3] : '',
369
- p['StatBuf'] ? p['StatBuf'].mtime : '',
370
- p['FileName'] || 'unknown'
371
- ]
372
-
373
- items += 1
374
- }
375
-
376
- if (items > 0)
377
- print("\n" + tbl.to_s + "\n")
378
- else
379
- print_line("No entries exist in #{path}")
380
- end
381
- else
382
- print_line("#{stat.prettymode} #{stat.size} #{stat.ftype[0,3]} #{stat.mtime} #{path}")
383
- end
384
-
385
- return true
386
- end
387
-
388
- #
389
- # Make one or more directory.
390
- #
391
- def cmd_mkdir(*args)
392
- if (args.length == 0)
393
- print_line("Usage: mkdir dir1 dir2 dir3 ...")
394
- return true
395
- end
396
-
397
- args.each { |dir|
398
- print_line("Creating directory: #{dir}")
399
-
400
- client.fs.dir.mkdir(dir)
401
- }
402
-
403
- return true
404
- end
405
-
406
- #
407
- # Display the working directory.
408
- #
409
- def cmd_pwd(*args)
410
- print_line(client.fs.dir.getwd)
411
- end
412
-
413
- alias cmd_getwd cmd_pwd
414
-
415
- #
416
- # Removes one or more directory if it's empty.
417
- #
418
- def cmd_rmdir(*args)
419
- if (args.length == 0 or args.include?("-h"))
420
- print_line("Usage: rmdir dir1 dir2 dir3 ...")
421
- return true
422
- end
423
-
424
- args.each { |dir|
425
- print_line("Removing directory: #{dir}")
426
- client.fs.dir.rmdir(dir)
427
- }
428
-
429
- return true
430
- end
431
-
432
- def cmd_upload_help
433
- print_line "Usage: upload [options] src1 src2 src3 ... destination"
434
- print_line
435
- print_line "Uploads local files and directories to the remote machine."
436
- print_line @@upload_opts.usage
437
- end
438
-
439
- #
440
- # Uploads a file or directory to the remote machine from the local
441
- # machine.
442
- #
443
- def cmd_upload(*args)
444
- if (args.empty? or args.include?("-h"))
445
- cmd_upload_help
446
- return true
447
- end
448
-
449
- recursive = false
450
- src_items = []
451
- last = nil
452
- dest = nil
453
-
454
- @@upload_opts.parse(args) { |opt, idx, val|
455
- case opt
456
- when "-r"
457
- recursive = true
458
- when nil
459
- if (last)
460
- src_items << last
461
- end
462
-
463
- last = val
464
- end
465
- }
466
-
467
- return true if not last
468
-
469
- # Source and destination will be the same
470
- src_items << last if src_items.empty?
471
-
472
- dest = last
473
-
474
- # Go through each source item and upload them
475
- src_items.each { |src|
476
- stat = ::File.stat(src)
477
-
478
- if (stat.directory?)
479
- client.fs.dir.upload(dest, src, recursive) { |step, src, dst|
480
- print_status("#{step.ljust(11)}: #{src} -> #{dst}")
481
- client.framework.events.on_session_upload(client, src, dest) if msf_loaded?
482
- }
483
- elsif (stat.file?)
484
- client.fs.file.upload(dest, src) { |step, src, dst|
485
- print_status("#{step.ljust(11)}: #{src} -> #{dst}")
486
- client.framework.events.on_session_upload(client, src, dest) if msf_loaded?
487
- }
488
- end
489
- }
490
-
491
- return true
492
- end
493
-
494
- def cmd_upload_tabs(str, words)
495
- return [] if words.length > 1
496
-
497
- tab_complete_filenames(str, words)
498
- end
17
+ Klass = Console::CommandDispatcher::Stdapi::Fs
18
+
19
+ include Console::CommandDispatcher
20
+
21
+ #
22
+ # Options for the download command.
23
+ #
24
+ @@download_opts = Rex::Parser::Arguments.new(
25
+ "-h" => [ false, "Help banner." ],
26
+ "-r" => [ false, "Download recursively." ])
27
+ #
28
+ # Options for the upload command.
29
+ #
30
+ @@upload_opts = Rex::Parser::Arguments.new(
31
+ "-h" => [ false, "Help banner." ],
32
+ "-r" => [ false, "Upload recursively." ])
33
+
34
+ #
35
+ # List of supported commands.
36
+ #
37
+ def commands
38
+ all = {
39
+ "cat" => "Read the contents of a file to the screen",
40
+ "cd" => "Change directory",
41
+ "del" => "Delete the specified file",
42
+ "download" => "Download a file or directory",
43
+ "edit" => "Edit a file",
44
+ "getlwd" => "Print local working directory",
45
+ "getwd" => "Print working directory",
46
+ "lcd" => "Change local working directory",
47
+ "lpwd" => "Print local working directory",
48
+ "ls" => "List files",
49
+ "mkdir" => "Make directory",
50
+ "pwd" => "Print working directory",
51
+ "rm" => "Delete the specified file",
52
+ "mv" => "Move source to destination",
53
+ "rmdir" => "Remove directory",
54
+ "search" => "Search for files",
55
+ "upload" => "Upload a file or directory",
56
+ }
57
+
58
+ reqs = {
59
+ "cat" => [ ],
60
+ "cd" => [ "stdapi_fs_chdir" ],
61
+ "del" => [ "stdapi_fs_rm" ],
62
+ "download" => [ ],
63
+ "edit" => [ ],
64
+ "getlwd" => [ ],
65
+ "getwd" => [ "stdapi_fs_getwd" ],
66
+ "lcd" => [ ],
67
+ "lpwd" => [ ],
68
+ "ls" => [ "stdapi_fs_stat", "stdapi_fs_ls" ],
69
+ "mkdir" => [ "stdapi_fs_mkdir" ],
70
+ "pwd" => [ "stdapi_fs_getwd" ],
71
+ "rmdir" => [ "stdapi_fs_delete_dir" ],
72
+ "rm" => [ "stdapi_fs_delete_file" ],
73
+ "mv" => [ "stdapi_fs_file_move" ],
74
+ "search" => [ "stdapi_fs_search" ],
75
+ "upload" => [ ],
76
+ }
77
+
78
+ all.delete_if do |cmd, desc|
79
+ del = false
80
+ reqs[cmd].each do |req|
81
+ next if client.commands.include? req
82
+ del = true
83
+ break
84
+ end
85
+
86
+ del
87
+ end
88
+
89
+ all
90
+ end
91
+
92
+ #
93
+ # Name for this dispatcher.
94
+ #
95
+ def name
96
+ "Stdapi: File system"
97
+ end
98
+
99
+ #
100
+ # Search for files.
101
+ #
102
+ def cmd_search( *args )
103
+
104
+ root = nil
105
+ glob = nil
106
+ recurse = true
107
+
108
+ opts = Rex::Parser::Arguments.new(
109
+ "-h" => [ false, "Help Banner." ],
110
+ "-d" => [ true, "The directory/drive to begin searching from. Leave empty to search all drives. (Default: #{root})" ],
111
+ "-f" => [ true, "The file pattern glob to search for. (e.g. *secret*.doc?)" ],
112
+ "-r" => [ true, "Recursivly search sub directories. (Default: #{recurse})" ]
113
+ )
114
+
115
+ opts.parse(args) { | opt, idx, val |
116
+ case opt
117
+ when "-h"
118
+ print_line( "Usage: search [-d dir] [-r recurse] -f pattern" )
119
+ print_line( "Search for files." )
120
+ print_line( opts.usage )
121
+ return
122
+ when "-d"
123
+ root = val
124
+ when "-f"
125
+ glob = val
126
+ when "-r"
127
+ recurse = false if( val =~ /^(f|n|0)/i )
128
+ end
129
+ }
130
+
131
+ if( not glob )
132
+ print_error( "You must specify a valid file glob to search for, e.g. >search -f *.doc" )
133
+ return
134
+ end
135
+
136
+ files = client.fs.file.search( root, glob, recurse )
137
+
138
+ if( not files.empty? )
139
+ print_line( "Found #{files.length} result#{ files.length > 1 ? 's' : '' }..." )
140
+ files.each do | file |
141
+ if( file['size'] > 0 )
142
+ print( " #{file['path']}#{ file['path'].empty? ? '' : '\\' }#{file['name']} (#{file['size']} bytes)\n" )
143
+ else
144
+ print( " #{file['path']}#{ file['path'].empty? ? '' : '\\' }#{file['name']}\n" )
145
+ end
146
+ end
147
+ else
148
+ print_line( "No files matching your search were found." )
149
+ end
150
+
151
+ end
152
+
153
+ #
154
+ # Reads the contents of a file and prints them to the screen.
155
+ #
156
+ def cmd_cat(*args)
157
+ if (args.length == 0)
158
+ print_line("Usage: cat file")
159
+ return true
160
+ end
161
+
162
+ if (client.fs.file.stat(args[0]).directory?)
163
+ print_error("#{args[0]} is a directory")
164
+ else
165
+ fd = client.fs.file.new(args[0], "rb")
166
+ begin
167
+ until fd.eof?
168
+ print(fd.read)
169
+ end
170
+ # EOFError is raised if file is empty, do nothing, just catch
171
+ rescue EOFError
172
+ end
173
+ fd.close
174
+ end
175
+
176
+ true
177
+ end
178
+
179
+ #
180
+ # Change the working directory.
181
+ #
182
+ def cmd_cd(*args)
183
+ if (args.length == 0)
184
+ print_line("Usage: cd directory")
185
+ return true
186
+ end
187
+ if args[0] =~ /\%(\w*)\%/
188
+ client.fs.dir.chdir(client.fs.file.expand_path(args[0].upcase))
189
+ else
190
+ client.fs.dir.chdir(args[0])
191
+ end
192
+
193
+ return true
194
+ end
195
+
196
+ #
197
+ # Change the local working directory.
198
+ #
199
+ def cmd_lcd(*args)
200
+ if (args.length == 0)
201
+ print_line("Usage: lcd directory")
202
+ return true
203
+ end
204
+
205
+ ::Dir.chdir(args[0])
206
+
207
+ return true
208
+ end
209
+
210
+ #
211
+ # Delete the specified file.
212
+ #
213
+ def cmd_rm(*args)
214
+ if (args.length == 0)
215
+ print_line("Usage: rm file")
216
+ return true
217
+ end
218
+
219
+ client.fs.file.rm(args[0])
220
+
221
+ return true
222
+ end
223
+
224
+ alias :cmd_del :cmd_rm
225
+
226
+ #
227
+ # Move source to destination
228
+ #
229
+ def cmd_mv(*args)
230
+ if (args.length < 2)
231
+ print_line("Usage: mv oldfile newfile")
232
+ return true
233
+ end
234
+
235
+ client.fs.file.mv(args[0],args[1])
236
+
237
+ return true
238
+ end
239
+
240
+ alias :cmd_move :cmd_mv
241
+ alias :cmd_rename :cmd_mv
242
+
243
+
244
+ def cmd_download_help
245
+ print_line "Usage: download [options] src1 src2 src3 ... destination"
246
+ print_line
247
+ print_line "Downloads remote files and directories to the local machine."
248
+ print_line @@download_opts.usage
249
+ end
250
+
251
+ #
252
+ # Downloads a file or directory from the remote machine to the local
253
+ # machine.
254
+ #
255
+ def cmd_download(*args)
256
+ if (args.empty? or args.include? "-h")
257
+ cmd_download_help
258
+ return true
259
+ end
260
+
261
+ recursive = false
262
+ src_items = []
263
+ last = nil
264
+ dest = nil
265
+
266
+ @@download_opts.parse(args) { |opt, idx, val|
267
+ case opt
268
+ when "-r"
269
+ recursive = true
270
+ when nil
271
+ src_items << last if (last)
272
+ last = val
273
+ end
274
+ }
275
+
276
+ # No files given, nothing to do
277
+ if not last
278
+ cmd_download_help
279
+ return true
280
+ end
281
+
282
+ # Source and destination will be the same
283
+ if src_items.empty?
284
+ src_items << last
285
+ # Use the basename of the remote filename so we don't end up with
286
+ # a file named c:\\boot.ini in linux
287
+ dest = ::Rex::Post::Meterpreter::Extensions::Stdapi::Fs::File.basename(last)
288
+ else
289
+ dest = last
290
+ end
291
+
292
+ # Go through each source item and download them
293
+ src_items.each { |src|
294
+ stat = client.fs.file.stat(src)
295
+
296
+ if (stat.directory?)
297
+ client.fs.dir.download(dest, src, recursive, true) { |step, src, dst|
298
+ print_status("#{step.ljust(11)}: #{src} -> #{dst}")
299
+ client.framework.events.on_session_download(client, src, dest) if msf_loaded?
300
+ }
301
+ elsif (stat.file?)
302
+ client.fs.file.download(dest, src) { |step, src, dst|
303
+ print_status("#{step.ljust(11)}: #{src} -> #{dst}")
304
+ client.framework.events.on_session_download(client, src, dest) if msf_loaded?
305
+ }
306
+ end
307
+ }
308
+
309
+ return true
310
+ end
311
+
312
+ #
313
+ # Downloads a file to a temporary file, spawns and editor, and then uploads
314
+ # the contents to the remote machine after completion.
315
+ #
316
+ def cmd_edit(*args)
317
+ if (args.length == 0)
318
+ print_line("Usage: edit file")
319
+ return true
320
+ end
321
+
322
+ # Get a temporary file path
323
+ meterp_temp = Tempfile.new('meterp')
324
+ meterp_temp.binmode
325
+ temp_path = meterp_temp.path
326
+
327
+ begin
328
+ # Download the remote file to the temporary file
329
+ client.fs.file.download_file(temp_path, args[0])
330
+ rescue RequestError => re
331
+ # If the file doesn't exist, then it's okay. Otherwise, throw the
332
+ # error.
333
+ if re.result != 2
334
+ raise $!
335
+ end
336
+ end
337
+
338
+ # Spawn the editor (default to vi)
339
+ editor = Rex::Compat.getenv('EDITOR') || 'vi'
340
+
341
+ # If it succeeds, upload it to the remote side.
342
+ if (system("#{editor} #{temp_path}") == true)
343
+ client.fs.file.upload_file(args[0], temp_path)
344
+ end
345
+
346
+ # Get rid of that pesky temporary file
347
+ ::File.delete(temp_path) rescue nil
348
+ end
349
+
350
+ #
351
+ # Display the local working directory.
352
+ #
353
+ def cmd_lpwd(*args)
354
+ print_line(::Dir.pwd)
355
+ return true
356
+ end
357
+
358
+ alias cmd_getlwd cmd_lpwd
359
+
360
+ #
361
+ # Lists files
362
+ #
363
+ # TODO: make this more useful
364
+ #
365
+ def cmd_ls(*args)
366
+ path = args[0] || client.fs.dir.getwd
367
+ tbl = Rex::Ui::Text::Table.new(
368
+ 'Header' => "Listing: #{path}",
369
+ 'SortIndex' => 4,
370
+ 'Columns' =>
371
+ [
372
+ 'Mode',
373
+ 'Size',
374
+ 'Type',
375
+ 'Last modified',
376
+ 'Name',
377
+ ])
378
+
379
+ items = 0
380
+ stat = client.fs.file.stat(path)
381
+ if stat.directory?
382
+ # Enumerate each item...
383
+ # No need to sort as Table will do it for us
384
+ client.fs.dir.entries_with_info(path).each { |p|
385
+
386
+ tbl <<
387
+ [
388
+ p['StatBuf'] ? p['StatBuf'].prettymode : '',
389
+ p['StatBuf'] ? p['StatBuf'].size : '',
390
+ p['StatBuf'] ? p['StatBuf'].ftype[0,3] : '',
391
+ p['StatBuf'] ? p['StatBuf'].mtime : '',
392
+ p['FileName'] || 'unknown'
393
+ ]
394
+
395
+ items += 1
396
+ }
397
+
398
+ if (items > 0)
399
+ print("\n" + tbl.to_s + "\n")
400
+ else
401
+ print_line("No entries exist in #{path}")
402
+ end
403
+ else
404
+ print_line("#{stat.prettymode} #{stat.size} #{stat.ftype[0,3]} #{stat.mtime} #{path}")
405
+ end
406
+
407
+ return true
408
+ end
409
+
410
+ #
411
+ # Make one or more directory.
412
+ #
413
+ def cmd_mkdir(*args)
414
+ if (args.length == 0)
415
+ print_line("Usage: mkdir dir1 dir2 dir3 ...")
416
+ return true
417
+ end
418
+
419
+ args.each { |dir|
420
+ print_line("Creating directory: #{dir}")
421
+
422
+ client.fs.dir.mkdir(dir)
423
+ }
424
+
425
+ return true
426
+ end
427
+
428
+ #
429
+ # Display the working directory.
430
+ #
431
+ def cmd_pwd(*args)
432
+ print_line(client.fs.dir.getwd)
433
+ end
434
+
435
+ alias cmd_getwd cmd_pwd
436
+
437
+ #
438
+ # Removes one or more directory if it's empty.
439
+ #
440
+ def cmd_rmdir(*args)
441
+ if (args.length == 0 or args.include?("-h"))
442
+ print_line("Usage: rmdir dir1 dir2 dir3 ...")
443
+ return true
444
+ end
445
+
446
+ args.each { |dir|
447
+ print_line("Removing directory: #{dir}")
448
+ client.fs.dir.rmdir(dir)
449
+ }
450
+
451
+ return true
452
+ end
453
+
454
+ def cmd_upload_help
455
+ print_line "Usage: upload [options] src1 src2 src3 ... destination"
456
+ print_line
457
+ print_line "Uploads local files and directories to the remote machine."
458
+ print_line @@upload_opts.usage
459
+ end
460
+
461
+ #
462
+ # Uploads a file or directory to the remote machine from the local
463
+ # machine.
464
+ #
465
+ def cmd_upload(*args)
466
+ if (args.empty? or args.include?("-h"))
467
+ cmd_upload_help
468
+ return true
469
+ end
470
+
471
+ recursive = false
472
+ src_items = []
473
+ last = nil
474
+ dest = nil
475
+
476
+ @@upload_opts.parse(args) { |opt, idx, val|
477
+ case opt
478
+ when "-r"
479
+ recursive = true
480
+ when nil
481
+ if (last)
482
+ src_items << last
483
+ end
484
+
485
+ last = val
486
+ end
487
+ }
488
+
489
+ return true if not last
490
+
491
+ # Source and destination will be the same
492
+ src_items << last if src_items.empty?
493
+
494
+ dest = last
495
+
496
+ # Go through each source item and upload them
497
+ src_items.each { |src|
498
+ stat = ::File.stat(src)
499
+
500
+ if (stat.directory?)
501
+ client.fs.dir.upload(dest, src, recursive) { |step, src, dst|
502
+ print_status("#{step.ljust(11)}: #{src} -> #{dst}")
503
+ client.framework.events.on_session_upload(client, src, dest) if msf_loaded?
504
+ }
505
+ elsif (stat.file?)
506
+ client.fs.file.upload(dest, src) { |step, src, dst|
507
+ print_status("#{step.ljust(11)}: #{src} -> #{dst}")
508
+ client.framework.events.on_session_upload(client, src, dest) if msf_loaded?
509
+ }
510
+ end
511
+ }
512
+
513
+ return true
514
+ end
515
+
516
+ def cmd_upload_tabs(str, words)
517
+ return [] if words.length > 1
518
+
519
+ tab_complete_filenames(str, words)
520
+ end
499
521
 
500
522
  end
501
523