librex 0.0.68 → 0.0.70

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (528) hide show
  1. checksums.yaml +15 -0
  2. data/README.markdown +1 -1
  3. data/Rakefile +18 -16
  4. data/lib/rex.rb +14 -10
  5. data/lib/rex/LICENSE +2 -2
  6. data/lib/rex/arch.rb +76 -76
  7. data/lib/rex/arch/sparc.rb +57 -58
  8. data/lib/rex/arch/x86.rb +506 -496
  9. data/lib/rex/assembly/nasm.rb +83 -84
  10. data/lib/rex/compat.rb +228 -173
  11. data/lib/rex/constants.rb +47 -37
  12. data/lib/rex/elfparsey.rb +0 -3
  13. data/lib/rex/elfparsey/elf.rb +107 -110
  14. data/lib/rex/elfparsey/elfbase.rb +244 -247
  15. data/lib/rex/elfparsey/exceptions.rb +0 -3
  16. data/lib/rex/elfscan.rb +0 -3
  17. data/lib/rex/elfscan/scanner.rb +184 -166
  18. data/lib/rex/elfscan/search.rb +35 -38
  19. data/lib/rex/encoder/alpha2.rb +1 -2
  20. data/lib/rex/encoder/alpha2/alpha_mixed.rb +52 -53
  21. data/lib/rex/encoder/alpha2/alpha_upper.rb +62 -63
  22. data/lib/rex/encoder/alpha2/generic.rb +77 -78
  23. data/lib/rex/encoder/alpha2/unicode_mixed.rb +101 -97
  24. data/lib/rex/encoder/alpha2/unicode_upper.rb +106 -107
  25. data/lib/rex/encoder/bloxor/bloxor.rb +326 -0
  26. data/lib/rex/encoder/ndr.rb +68 -68
  27. data/lib/rex/encoder/nonalpha.rb +50 -51
  28. data/lib/rex/encoder/nonupper.rb +50 -51
  29. data/lib/rex/encoder/xdr.rb +78 -78
  30. data/lib/rex/encoder/xor.rb +52 -53
  31. data/lib/rex/encoder/xor/dword.rb +1 -2
  32. data/lib/rex/encoder/xor/dword_additive.rb +1 -2
  33. data/lib/rex/encoders/xor_dword.rb +17 -18
  34. data/lib/rex/encoders/xor_dword_additive.rb +35 -36
  35. data/lib/rex/encoding/xor.rb +0 -1
  36. data/lib/rex/encoding/xor/byte.rb +3 -4
  37. data/lib/rex/encoding/xor/dword.rb +3 -4
  38. data/lib/rex/encoding/xor/dword_additive.rb +72 -73
  39. data/lib/rex/encoding/xor/exceptions.rb +2 -3
  40. data/lib/rex/encoding/xor/generic.rb +129 -130
  41. data/lib/rex/encoding/xor/qword.rb +3 -4
  42. data/lib/rex/encoding/xor/word.rb +3 -4
  43. data/lib/rex/exceptions.rb +100 -101
  44. data/lib/rex/exploitation/cmdstager.rb +3 -3
  45. data/lib/rex/exploitation/cmdstager/base.rb +170 -156
  46. data/lib/rex/exploitation/cmdstager/bourne.rb +105 -0
  47. data/lib/rex/exploitation/cmdstager/debug_asm.rb +110 -113
  48. data/lib/rex/exploitation/cmdstager/debug_write.rb +106 -109
  49. data/lib/rex/exploitation/cmdstager/echo.rb +164 -0
  50. data/lib/rex/exploitation/cmdstager/printf.rb +122 -0
  51. data/lib/rex/exploitation/cmdstager/tftp.rb +34 -27
  52. data/lib/rex/exploitation/cmdstager/vbs.rb +95 -98
  53. data/lib/rex/exploitation/egghunter.rb +359 -346
  54. data/lib/rex/exploitation/encryptjs.rb +60 -60
  55. data/lib/rex/exploitation/heaplib.rb +76 -76
  56. data/lib/rex/exploitation/js.rb +6 -0
  57. data/lib/rex/exploitation/js/detect.rb +69 -0
  58. data/lib/rex/exploitation/js/memory.rb +81 -0
  59. data/lib/rex/exploitation/js/network.rb +84 -0
  60. data/lib/rex/exploitation/js/utils.rb +33 -0
  61. data/lib/rex/exploitation/jsobfu.rb +448 -424
  62. data/lib/rex/exploitation/obfuscatejs.rb +301 -301
  63. data/lib/rex/exploitation/omelet.rb +257 -257
  64. data/lib/rex/exploitation/opcodedb.rb +699 -699
  65. data/lib/rex/exploitation/ropdb.rb +189 -0
  66. data/lib/rex/exploitation/seh.rb +68 -68
  67. data/lib/rex/file.rb +96 -49
  68. data/lib/rex/image_source.rb +0 -3
  69. data/lib/rex/image_source/disk.rb +45 -48
  70. data/lib/rex/image_source/image_source.rb +33 -36
  71. data/lib/rex/image_source/memory.rb +17 -20
  72. data/lib/rex/io/bidirectional_pipe.rb +118 -115
  73. data/lib/rex/io/datagram_abstraction.rb +13 -14
  74. data/lib/rex/io/ring_buffer.rb +273 -273
  75. data/lib/rex/io/stream.rb +284 -284
  76. data/lib/rex/io/stream_abstraction.rb +183 -181
  77. data/lib/rex/io/stream_server.rb +193 -193
  78. data/lib/rex/job_container.rb +167 -167
  79. data/lib/rex/logging.rb +0 -1
  80. data/lib/rex/logging/log_dispatcher.rb +113 -113
  81. data/lib/rex/logging/log_sink.rb +17 -17
  82. data/lib/rex/logging/sinks/flatfile.rb +36 -36
  83. data/lib/rex/logging/sinks/stderr.rb +27 -27
  84. data/lib/rex/mac_oui.rb +16572 -16571
  85. data/lib/rex/machparsey.rb +0 -1
  86. data/lib/rex/machparsey/exceptions.rb +0 -1
  87. data/lib/rex/machparsey/mach.rb +160 -161
  88. data/lib/rex/machparsey/machbase.rb +367 -368
  89. data/lib/rex/machscan.rb +0 -1
  90. data/lib/rex/machscan/scanner.rb +175 -176
  91. data/lib/rex/mime/encoding.rb +17 -0
  92. data/lib/rex/mime/header.rb +58 -58
  93. data/lib/rex/mime/message.rb +140 -137
  94. data/lib/rex/mime/part.rb +41 -12
  95. data/lib/rex/nop/opty2.rb +90 -90
  96. data/lib/rex/nop/opty2_tables.rb +273 -273
  97. data/lib/rex/ole.rb +0 -4
  98. data/lib/rex/ole/clsid.rb +26 -30
  99. data/lib/rex/ole/difat.rb +121 -125
  100. data/lib/rex/ole/directory.rb +205 -209
  101. data/lib/rex/ole/direntry.rb +217 -221
  102. data/lib/rex/ole/fat.rb +79 -83
  103. data/lib/rex/ole/header.rb +178 -182
  104. data/lib/rex/ole/minifat.rb +49 -53
  105. data/lib/rex/ole/propset.rb +113 -117
  106. data/lib/rex/ole/samples/create_ole.rb +8 -9
  107. data/lib/rex/ole/samples/dir.rb +10 -11
  108. data/lib/rex/ole/samples/dump_stream.rb +14 -15
  109. data/lib/rex/ole/samples/ole_info.rb +5 -6
  110. data/lib/rex/ole/storage.rb +372 -376
  111. data/lib/rex/ole/stream.rb +33 -37
  112. data/lib/rex/ole/substorage.rb +20 -24
  113. data/lib/rex/ole/util.rb +137 -141
  114. data/lib/rex/parser/acunetix_nokogiri.rb +398 -398
  115. data/lib/rex/parser/apple_backup_manifestdb.rb +116 -116
  116. data/lib/rex/parser/appscan_nokogiri.rb +359 -359
  117. data/lib/rex/parser/arguments.rb +88 -88
  118. data/lib/rex/parser/burp_session_nokogiri.rb +258 -258
  119. data/lib/rex/parser/ci_nokogiri.rb +184 -184
  120. data/lib/rex/parser/foundstone_nokogiri.rb +334 -333
  121. data/lib/rex/parser/fusionvm_nokogiri.rb +94 -94
  122. data/lib/rex/parser/ini.rb +167 -167
  123. data/lib/rex/parser/ip360_aspl_xml.rb +84 -84
  124. data/lib/rex/parser/ip360_xml.rb +77 -77
  125. data/lib/rex/parser/mbsa_nokogiri.rb +224 -224
  126. data/lib/rex/parser/nessus_xml.rb +100 -100
  127. data/lib/rex/parser/netsparker_xml.rb +89 -75
  128. data/lib/rex/parser/nexpose_raw_nokogiri.rb +677 -677
  129. data/lib/rex/parser/nexpose_simple_nokogiri.rb +322 -322
  130. data/lib/rex/parser/nexpose_xml.rb +105 -105
  131. data/lib/rex/parser/nmap_nokogiri.rb +386 -386
  132. data/lib/rex/parser/nmap_xml.rb +116 -116
  133. data/lib/rex/parser/nokogiri_doc_mixin.rb +223 -221
  134. data/lib/rex/parser/openvas_nokogiri.rb +162 -162
  135. data/lib/rex/parser/outpost24_nokogiri.rb +239 -0
  136. data/lib/rex/parser/retina_xml.rb +90 -90
  137. data/lib/rex/parser/unattend.rb +171 -0
  138. data/lib/rex/parser/wapiti_nokogiri.rb +89 -89
  139. data/lib/rex/payloads/win32/common.rb +14 -14
  140. data/lib/rex/payloads/win32/kernel.rb +36 -36
  141. data/lib/rex/payloads/win32/kernel/common.rb +32 -32
  142. data/lib/rex/payloads/win32/kernel/recovery.rb +27 -27
  143. data/lib/rex/payloads/win32/kernel/stager.rb +170 -170
  144. data/lib/rex/peparsey.rb +0 -3
  145. data/lib/rex/peparsey/exceptions.rb +0 -3
  146. data/lib/rex/peparsey/pe.rb +196 -199
  147. data/lib/rex/peparsey/pe_memdump.rb +35 -38
  148. data/lib/rex/peparsey/pebase.rb +1633 -1652
  149. data/lib/rex/peparsey/section.rb +115 -124
  150. data/lib/rex/pescan.rb +0 -3
  151. data/lib/rex/pescan/analyze.rb +351 -351
  152. data/lib/rex/pescan/scanner.rb +182 -182
  153. data/lib/rex/pescan/search.rb +59 -59
  154. data/lib/rex/platforms/windows.rb +37 -37
  155. data/lib/rex/poly.rb +111 -110
  156. data/lib/rex/poly/block.rb +419 -417
  157. data/lib/rex/poly/machine.rb +12 -0
  158. data/lib/rex/poly/machine/machine.rb +829 -0
  159. data/lib/rex/poly/machine/x86.rb +508 -0
  160. data/lib/rex/poly/register.rb +70 -70
  161. data/lib/rex/poly/register/x86.rb +22 -22
  162. data/lib/rex/post.rb +0 -1
  163. data/lib/rex/post/dir.rb +35 -36
  164. data/lib/rex/post/file.rb +140 -141
  165. data/lib/rex/post/file_stat.rb +198 -199
  166. data/lib/rex/post/io.rb +167 -168
  167. data/lib/rex/post/meterpreter.rb +1 -1
  168. data/lib/rex/post/meterpreter/channel.rb +389 -390
  169. data/lib/rex/post/meterpreter/channel_container.rb +33 -34
  170. data/lib/rex/post/meterpreter/channels/pool.rb +129 -130
  171. data/lib/rex/post/meterpreter/channels/pools/file.rb +35 -36
  172. data/lib/rex/post/meterpreter/channels/pools/stream_pool.rb +72 -73
  173. data/lib/rex/post/meterpreter/channels/stream.rb +62 -63
  174. data/lib/rex/post/meterpreter/client.rb +442 -436
  175. data/lib/rex/post/meterpreter/client_core.rb +326 -310
  176. data/lib/rex/post/meterpreter/dependencies.rb +0 -1
  177. data/lib/rex/post/meterpreter/extension.rb +12 -13
  178. data/lib/rex/post/meterpreter/extensions/espia/espia.rb +35 -36
  179. data/lib/rex/post/meterpreter/extensions/extapi/adsi/adsi.rb +71 -0
  180. data/lib/rex/post/meterpreter/extensions/extapi/clipboard/clipboard.rb +169 -0
  181. data/lib/rex/post/meterpreter/extensions/extapi/extapi.rb +45 -0
  182. data/lib/rex/post/meterpreter/extensions/extapi/service/service.rb +104 -0
  183. data/lib/rex/post/meterpreter/extensions/extapi/tlv.rb +77 -0
  184. data/lib/rex/post/meterpreter/extensions/extapi/window/window.rb +56 -0
  185. data/lib/rex/post/meterpreter/extensions/extapi/wmi/wmi.rb +75 -0
  186. data/lib/rex/post/meterpreter/extensions/incognito/incognito.rb +70 -71
  187. data/lib/rex/post/meterpreter/extensions/kiwi/kiwi.rb +361 -0
  188. data/lib/rex/post/meterpreter/extensions/kiwi/tlv.rb +76 -0
  189. data/lib/rex/post/meterpreter/extensions/lanattacks/dhcp/dhcp.rb +78 -0
  190. data/lib/rex/post/meterpreter/extensions/lanattacks/lanattacks.rb +22 -78
  191. data/lib/rex/post/meterpreter/extensions/lanattacks/tftp/tftp.rb +49 -0
  192. data/lib/rex/post/meterpreter/extensions/lanattacks/tlv.rb +4 -4
  193. data/lib/rex/post/meterpreter/extensions/mimikatz/mimikatz.rb +128 -0
  194. data/lib/rex/post/meterpreter/extensions/mimikatz/tlv.rb +16 -0
  195. data/lib/rex/post/meterpreter/extensions/networkpug/networkpug.rb +38 -39
  196. data/lib/rex/post/meterpreter/extensions/networkpug/tlv.rb +1 -1
  197. data/lib/rex/post/meterpreter/extensions/priv/fs.rb +95 -96
  198. data/lib/rex/post/meterpreter/extensions/priv/passwd.rb +39 -40
  199. data/lib/rex/post/meterpreter/extensions/priv/priv.rb +80 -85
  200. data/lib/rex/post/meterpreter/extensions/sniffer/sniffer.rb +94 -95
  201. data/lib/rex/post/meterpreter/extensions/stdapi/constants.rb +207 -147
  202. data/lib/rex/post/meterpreter/extensions/stdapi/fs/dir.rb +258 -259
  203. data/lib/rex/post/meterpreter/extensions/stdapi/fs/file.rb +366 -301
  204. data/lib/rex/post/meterpreter/extensions/stdapi/fs/file_stat.rb +72 -73
  205. data/lib/rex/post/meterpreter/extensions/stdapi/fs/io.rb +24 -25
  206. data/lib/rex/post/meterpreter/extensions/stdapi/net/arp.rb +59 -0
  207. data/lib/rex/post/meterpreter/extensions/stdapi/net/config.rb +227 -149
  208. data/lib/rex/post/meterpreter/extensions/stdapi/net/interface.rb +107 -108
  209. data/lib/rex/post/meterpreter/extensions/stdapi/net/netstat.rb +97 -0
  210. data/lib/rex/post/meterpreter/extensions/stdapi/net/resolve.rb +106 -0
  211. data/lib/rex/post/meterpreter/extensions/stdapi/net/route.rb +41 -42
  212. data/lib/rex/post/meterpreter/extensions/stdapi/net/socket.rb +102 -101
  213. data/lib/rex/post/meterpreter/extensions/stdapi/net/socket_subsystem/tcp_client_channel.rb +151 -152
  214. data/lib/rex/post/meterpreter/extensions/stdapi/net/socket_subsystem/tcp_server_channel.rb +142 -142
  215. data/lib/rex/post/meterpreter/extensions/stdapi/net/socket_subsystem/udp_channel.rb +185 -185
  216. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/api_constants.rb +38118 -38117
  217. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/buffer_item.rb +7 -7
  218. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_advapi32.rb +2086 -2084
  219. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_crypt32.rb +15 -15
  220. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_iphlpapi.rb +80 -80
  221. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_kernel32.rb +3835 -3833
  222. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_netapi32.rb +84 -28
  223. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_ntdll.rb +151 -137
  224. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_shell32.rb +15 -6
  225. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_user32.rb +3155 -3155
  226. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_version.rb +41 -0
  227. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_wlanapi.rb +70 -70
  228. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_wldap32.rb +128 -0
  229. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_ws2_32.rb +596 -596
  230. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/dll.rb +310 -301
  231. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/dll_function.rb +71 -61
  232. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/dll_helper.rb +100 -100
  233. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/dll_wrapper.rb +14 -14
  234. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/mock_magic.rb +488 -488
  235. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/multicall.rb +273 -264
  236. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/platform_util.rb +5 -5
  237. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/railgun.rb +240 -238
  238. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/tlv.rb +17 -15
  239. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/type/pointer_util.rb +61 -61
  240. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/util.rb +654 -635
  241. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/win_const_manager.rb +49 -49
  242. data/lib/rex/post/meterpreter/extensions/stdapi/stdapi.rb +103 -102
  243. data/lib/rex/post/meterpreter/extensions/stdapi/sys/config.rb +98 -68
  244. data/lib/rex/post/meterpreter/extensions/stdapi/sys/event_log.rb +165 -166
  245. data/lib/rex/post/meterpreter/extensions/stdapi/sys/event_log_subsystem/event_record.rb +16 -17
  246. data/lib/rex/post/meterpreter/extensions/stdapi/sys/power.rb +34 -36
  247. data/lib/rex/post/meterpreter/extensions/stdapi/sys/process.rb +363 -364
  248. data/lib/rex/post/meterpreter/extensions/stdapi/sys/process_subsystem/image.rb +102 -103
  249. data/lib/rex/post/meterpreter/extensions/stdapi/sys/process_subsystem/io.rb +28 -29
  250. data/lib/rex/post/meterpreter/extensions/stdapi/sys/process_subsystem/memory.rb +303 -304
  251. data/lib/rex/post/meterpreter/extensions/stdapi/sys/process_subsystem/thread.rb +113 -114
  252. data/lib/rex/post/meterpreter/extensions/stdapi/sys/registry.rb +260 -261
  253. data/lib/rex/post/meterpreter/extensions/stdapi/sys/registry_subsystem/registry_key.rb +165 -166
  254. data/lib/rex/post/meterpreter/extensions/stdapi/sys/registry_subsystem/registry_value.rb +69 -70
  255. data/lib/rex/post/meterpreter/extensions/stdapi/sys/registry_subsystem/remote_registry_key.rb +160 -161
  256. data/lib/rex/post/meterpreter/extensions/stdapi/sys/thread.rb +143 -144
  257. data/lib/rex/post/meterpreter/extensions/stdapi/tlv.rb +29 -12
  258. data/lib/rex/post/meterpreter/extensions/stdapi/ui.rb +230 -231
  259. data/lib/rex/post/meterpreter/extensions/stdapi/webcam/webcam.rb +181 -44
  260. data/lib/rex/post/meterpreter/inbound_packet_handler.rb +12 -13
  261. data/lib/rex/post/meterpreter/object_aliases.rb +56 -57
  262. data/lib/rex/post/meterpreter/packet.rb +591 -592
  263. data/lib/rex/post/meterpreter/packet_dispatcher.rb +506 -496
  264. data/lib/rex/post/meterpreter/packet_parser.rb +72 -73
  265. data/lib/rex/post/meterpreter/packet_response_waiter.rb +56 -57
  266. data/lib/rex/post/meterpreter/ui/console.rb +112 -112
  267. data/lib/rex/post/meterpreter/ui/console/command_dispatcher.rb +53 -53
  268. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/core.rb +911 -854
  269. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/espia.rb +86 -86
  270. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/extapi.rb +65 -0
  271. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/extapi/adsi.rb +198 -0
  272. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/extapi/clipboard.rb +444 -0
  273. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/extapi/service.rb +199 -0
  274. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/extapi/window.rb +118 -0
  275. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/extapi/wmi.rb +108 -0
  276. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/incognito.rb +220 -220
  277. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/kiwi.rb +509 -0
  278. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/lanattacks.rb +60 -0
  279. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/lanattacks/dhcp.rb +254 -0
  280. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/lanattacks/tftp.rb +159 -0
  281. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/mimikatz.rb +182 -0
  282. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/networkpug.rb +173 -173
  283. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/priv.rb +40 -40
  284. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/priv/elevate.rb +75 -77
  285. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/priv/passwd.rb +30 -30
  286. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/priv/timestomp.rb +105 -105
  287. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/sniffer.rb +182 -182
  288. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/stdapi.rb +37 -37
  289. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/stdapi/fs.rb +504 -482
  290. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/stdapi/net.rb +401 -330
  291. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/stdapi/sys.rb +883 -581
  292. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/stdapi/ui.rb +296 -299
  293. data/lib/rex/post/meterpreter/ui/console/command_dispatcher/stdapi/webcam.rb +320 -153
  294. data/lib/rex/post/meterpreter/ui/console/interactive_channel.rb +78 -78
  295. data/lib/rex/post/permission.rb +0 -1
  296. data/lib/rex/post/process.rb +39 -40
  297. data/lib/rex/post/thread.rb +41 -42
  298. data/lib/rex/post/ui.rb +35 -36
  299. data/lib/rex/proto/addp.rb +218 -0
  300. data/lib/rex/proto/dcerpc/client.rb +344 -344
  301. data/lib/rex/proto/dcerpc/exceptions.rb +128 -128
  302. data/lib/rex/proto/dcerpc/handle.rb +32 -32
  303. data/lib/rex/proto/dcerpc/ndr.rb +56 -56
  304. data/lib/rex/proto/dcerpc/packet.rb +249 -245
  305. data/lib/rex/proto/dcerpc/response.rb +170 -170
  306. data/lib/rex/proto/dcerpc/uuid.rb +65 -65
  307. data/lib/rex/proto/dcerpc/wdscp.rb +3 -0
  308. data/lib/rex/proto/dcerpc/wdscp/constants.rb +89 -0
  309. data/lib/rex/proto/dcerpc/wdscp/packet.rb +94 -0
  310. data/lib/rex/proto/dhcp.rb +0 -1
  311. data/lib/rex/proto/dhcp/constants.rb +0 -1
  312. data/lib/rex/proto/dhcp/server.rb +303 -304
  313. data/lib/rex/proto/drda/constants.rb +1 -1
  314. data/lib/rex/proto/drda/packet.rb +186 -186
  315. data/lib/rex/proto/drda/utils.rb +104 -104
  316. data/lib/rex/proto/http.rb +1 -0
  317. data/lib/rex/proto/http/client.rb +692 -820
  318. data/lib/rex/proto/http/client_request.rb +472 -0
  319. data/lib/rex/proto/http/handler.rb +25 -25
  320. data/lib/rex/proto/http/handler/erb.rb +104 -104
  321. data/lib/rex/proto/http/handler/proc.rb +37 -37
  322. data/lib/rex/proto/http/header.rb +149 -149
  323. data/lib/rex/proto/http/packet.rb +388 -382
  324. data/lib/rex/proto/http/request.rb +332 -335
  325. data/lib/rex/proto/http/response.rb +132 -72
  326. data/lib/rex/proto/http/server.rb +348 -338
  327. data/lib/rex/proto/iax2/call.rb +310 -310
  328. data/lib/rex/proto/iax2/client.rb +197 -197
  329. data/lib/rex/proto/iax2/codecs/alaw.rb +4 -4
  330. data/lib/rex/proto/iax2/codecs/mulaw.rb +4 -4
  331. data/lib/rex/proto/ipmi.rb +57 -0
  332. data/lib/rex/proto/ipmi/channel_auth_reply.rb +88 -0
  333. data/lib/rex/proto/ipmi/open_session_reply.rb +35 -0
  334. data/lib/rex/proto/ipmi/rakp2.rb +35 -0
  335. data/lib/rex/proto/ipmi/utils.rb +125 -0
  336. data/lib/rex/proto/natpmp.rb +1 -5
  337. data/lib/rex/proto/natpmp/constants.rb +4 -4
  338. data/lib/rex/proto/natpmp/packet.rb +25 -25
  339. data/lib/rex/proto/ntlm/base.rb +271 -271
  340. data/lib/rex/proto/ntlm/constants.rb +61 -61
  341. data/lib/rex/proto/ntlm/crypt.rb +348 -352
  342. data/lib/rex/proto/ntlm/exceptions.rb +3 -3
  343. data/lib/rex/proto/ntlm/message.rb +468 -471
  344. data/lib/rex/proto/ntlm/utils.rb +746 -746
  345. data/lib/rex/proto/pjl.rb +30 -0
  346. data/lib/rex/proto/pjl/client.rb +162 -0
  347. data/lib/rex/proto/proxy/socks4a.rb +440 -440
  348. data/lib/rex/proto/rfb.rb +1 -8
  349. data/lib/rex/proto/rfb/cipher.rb +46 -49
  350. data/lib/rex/proto/rfb/client.rb +179 -182
  351. data/lib/rex/proto/rfb/constants.rb +18 -21
  352. data/lib/rex/proto/smb/client.rb +1954 -1843
  353. data/lib/rex/proto/smb/constants.rb +533 -516
  354. data/lib/rex/proto/smb/crypt.rb +21 -21
  355. data/lib/rex/proto/smb/evasions.rb +43 -43
  356. data/lib/rex/proto/smb/exceptions.rb +791 -791
  357. data/lib/rex/proto/smb/simpleclient.rb +142 -286
  358. data/lib/rex/proto/smb/simpleclient/open_file.rb +106 -0
  359. data/lib/rex/proto/smb/simpleclient/open_pipe.rb +57 -0
  360. data/lib/rex/proto/smb/utils.rb +81 -81
  361. data/lib/rex/proto/sunrpc/client.rb +158 -158
  362. data/lib/rex/proto/tftp.rb +0 -1
  363. data/lib/rex/proto/tftp/client.rb +289 -289
  364. data/lib/rex/proto/tftp/constants.rb +9 -10
  365. data/lib/rex/proto/tftp/server.rb +466 -467
  366. data/lib/rex/random_identifier_generator.rb +176 -0
  367. data/lib/rex/registry.rb +1 -1
  368. data/lib/rex/registry/hive.rb +88 -88
  369. data/lib/rex/registry/lfkey.rb +25 -25
  370. data/lib/rex/registry/nodekey.rb +30 -30
  371. data/lib/rex/registry/regf.rb +10 -10
  372. data/lib/rex/registry/valuekey.rb +43 -43
  373. data/lib/rex/registry/valuelist.rb +13 -13
  374. data/lib/rex/ropbuilder/rop.rb +254 -253
  375. data/lib/rex/script.rb +21 -22
  376. data/lib/rex/script/base.rb +51 -50
  377. data/lib/rex/script/meterpreter.rb +2 -2
  378. data/lib/rex/service.rb +24 -24
  379. data/lib/rex/service_manager.rb +132 -132
  380. data/lib/rex/services/local_relay.rb +398 -398
  381. data/lib/rex/socket.rb +758 -763
  382. data/lib/rex/socket/comm.rb +95 -95
  383. data/lib/rex/socket/comm/local.rb +507 -440
  384. data/lib/rex/socket/ip.rb +118 -118
  385. data/lib/rex/socket/parameters.rb +351 -350
  386. data/lib/rex/socket/range_walker.rb +445 -368
  387. data/lib/rex/socket/ssl_tcp.rb +323 -317
  388. data/lib/rex/socket/ssl_tcp_server.rb +173 -158
  389. data/lib/rex/socket/subnet_walker.rb +48 -48
  390. data/lib/rex/socket/switch_board.rb +259 -259
  391. data/lib/rex/socket/tcp.rb +58 -56
  392. data/lib/rex/socket/tcp_server.rb +42 -42
  393. data/lib/rex/socket/udp.rb +152 -152
  394. data/lib/rex/sslscan/result.rb +200 -0
  395. data/lib/rex/sslscan/scanner.rb +205 -0
  396. data/lib/rex/struct2.rb +0 -1
  397. data/lib/rex/struct2/c_struct.rb +162 -163
  398. data/lib/rex/struct2/c_struct_template.rb +21 -22
  399. data/lib/rex/struct2/constant.rb +6 -7
  400. data/lib/rex/struct2/element.rb +30 -31
  401. data/lib/rex/struct2/generic.rb +60 -61
  402. data/lib/rex/struct2/restraint.rb +40 -41
  403. data/lib/rex/struct2/s_string.rb +60 -61
  404. data/lib/rex/struct2/s_struct.rb +97 -98
  405. data/lib/rex/sync.rb +0 -1
  406. data/lib/rex/sync/event.rb +62 -72
  407. data/lib/rex/sync/read_write_lock.rb +149 -149
  408. data/lib/rex/sync/ref.rb +42 -42
  409. data/lib/rex/sync/thread_safe.rb +59 -59
  410. data/lib/rex/text.rb +1803 -1315
  411. data/lib/rex/thread_factory.rb +25 -25
  412. data/lib/rex/time.rb +44 -44
  413. data/lib/rex/transformer.rb +91 -91
  414. data/lib/rex/ui/interactive.rb +265 -265
  415. data/lib/rex/ui/output.rb +66 -60
  416. data/lib/rex/ui/progress_tracker.rb +79 -79
  417. data/lib/rex/ui/subscriber.rb +144 -134
  418. data/lib/rex/ui/text/color.rb +76 -76
  419. data/lib/rex/ui/text/dispatcher_shell.rb +512 -505
  420. data/lib/rex/ui/text/input.rb +96 -96
  421. data/lib/rex/ui/text/input/buffer.rb +58 -58
  422. data/lib/rex/ui/text/input/readline.rb +114 -114
  423. data/lib/rex/ui/text/input/socket.rb +77 -77
  424. data/lib/rex/ui/text/input/stdio.rb +24 -24
  425. data/lib/rex/ui/text/irb_shell.rb +45 -41
  426. data/lib/rex/ui/text/output.rb +64 -60
  427. data/lib/rex/ui/text/output/buffer.rb +42 -42
  428. data/lib/rex/ui/text/output/buffer/stdout.rb +25 -0
  429. data/lib/rex/ui/text/output/file.rb +24 -24
  430. data/lib/rex/ui/text/output/socket.rb +24 -24
  431. data/lib/rex/ui/text/output/stdio.rb +29 -29
  432. data/lib/rex/ui/text/output/tee.rb +36 -36
  433. data/lib/rex/ui/text/progress_tracker.rb +37 -37
  434. data/lib/rex/ui/text/shell.rb +371 -361
  435. data/lib/rex/ui/text/table.rb +320 -284
  436. data/lib/rex/zip.rb +0 -1
  437. data/lib/rex/zip/archive.rb +115 -94
  438. data/lib/rex/zip/blocks.rb +101 -100
  439. data/lib/rex/zip/entry.rb +108 -99
  440. data/lib/rex/zip/jar.rb +261 -206
  441. data/lib/rex/zip/samples/comment.rb +1 -2
  442. data/lib/rex/zip/samples/mkwar.rb +12 -13
  443. data/lib/rex/zip/samples/mkzip.rb +1 -2
  444. data/lib/rex/zip/samples/recursive.rb +29 -30
  445. metadata +424 -446
  446. data/lib/rex/arch/sparc.rb.ut.rb +0 -19
  447. data/lib/rex/arch/x86.rb.ut.rb +0 -94
  448. data/lib/rex/assembly/nasm.rb.ut.rb +0 -23
  449. data/lib/rex/encoder/ndr.rb.ut.rb +0 -45
  450. data/lib/rex/encoder/xdr.rb.ut.rb +0 -30
  451. data/lib/rex/encoders/xor_dword_additive.rb.ut.rb +0 -13
  452. data/lib/rex/encoding/xor.rb.ts.rb +0 -15
  453. data/lib/rex/encoding/xor/byte.rb.ut.rb +0 -22
  454. data/lib/rex/encoding/xor/dword.rb.ut.rb +0 -16
  455. data/lib/rex/encoding/xor/dword_additive.rb.ut.rb +0 -16
  456. data/lib/rex/encoding/xor/generic.rb.ut.rb +0 -121
  457. data/lib/rex/encoding/xor/word.rb.ut.rb +0 -14
  458. data/lib/rex/exceptions.rb.ut.rb +0 -45
  459. data/lib/rex/exploitation/egghunter.rb.ut.rb +0 -28
  460. data/lib/rex/exploitation/javascriptosdetect.js +0 -1014
  461. data/lib/rex/exploitation/javascriptosdetect.rb +0 -43
  462. data/lib/rex/exploitation/omelet.rb.ut.rb +0 -27
  463. data/lib/rex/exploitation/opcodedb.rb.ut.rb +0 -280
  464. data/lib/rex/exploitation/seh.rb.ut.rb +0 -20
  465. data/lib/rex/file.rb.ut.rb +0 -17
  466. data/lib/rex/io/ring_buffer.rb.ut.rb +0 -135
  467. data/lib/rex/nop/opty2.rb.ut.rb +0 -24
  468. data/lib/rex/parser/arguments.rb.ut.rb +0 -68
  469. data/lib/rex/parser/ini.rb.ut.rb +0 -30
  470. data/lib/rex/post/meterpreter/extensions/stdapi/railgun.rb.ts.rb +0 -18
  471. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/api_constants.rb.ut.rb +0 -39
  472. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/buffer_item.rb.ut.rb +0 -37
  473. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/dll.rb.ut.rb +0 -52
  474. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/dll_function.rb.ut.rb +0 -43
  475. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/dll_helper.rb.ut.rb +0 -128
  476. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/dll_wrapper.rb.ut.rb +0 -64
  477. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/platform_util.rb.ut.rb +0 -29
  478. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/railgun.rb.ut.rb +0 -155
  479. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/type/pointer_util.rb.ut.rb +0 -128
  480. data/lib/rex/post/meterpreter/extensions/stdapi/railgun/win_const_manager.rb.ut.rb +0 -124
  481. data/lib/rex/proto.rb.ts.rb +0 -9
  482. data/lib/rex/proto/dcerpc.rb.ts.rb +0 -10
  483. data/lib/rex/proto/dcerpc/client.rb.ut.rb +0 -492
  484. data/lib/rex/proto/dcerpc/handle.rb.ut.rb +0 -86
  485. data/lib/rex/proto/dcerpc/ndr.rb.ut.rb +0 -42
  486. data/lib/rex/proto/dcerpc/packet.rb.ut.rb +0 -57
  487. data/lib/rex/proto/dcerpc/response.rb.ut.rb +0 -16
  488. data/lib/rex/proto/dcerpc/uuid.rb.ut.rb +0 -47
  489. data/lib/rex/proto/drda.rb.ts.rb +0 -18
  490. data/lib/rex/proto/drda/constants.rb.ut.rb +0 -24
  491. data/lib/rex/proto/drda/packet.rb.ut.rb +0 -110
  492. data/lib/rex/proto/drda/utils.rb.ut.rb +0 -85
  493. data/lib/rex/proto/http.rb.ts.rb +0 -13
  494. data/lib/rex/proto/http/client.rb.ut.rb +0 -96
  495. data/lib/rex/proto/http/handler/erb.rb.ut.rb +0 -22
  496. data/lib/rex/proto/http/handler/erb.rb.ut.rb.rhtml +0 -1
  497. data/lib/rex/proto/http/handler/proc.rb.ut.rb +0 -25
  498. data/lib/rex/proto/http/header.rb.ut.rb +0 -47
  499. data/lib/rex/proto/http/packet.rb.ut.rb +0 -166
  500. data/lib/rex/proto/http/request.rb.ut.rb +0 -215
  501. data/lib/rex/proto/http/response.rb.ut.rb +0 -150
  502. data/lib/rex/proto/http/server.rb.ut.rb +0 -80
  503. data/lib/rex/proto/ntlm.rb.ut.rb +0 -181
  504. data/lib/rex/proto/rfb.rb.ut.rb +0 -40
  505. data/lib/rex/proto/smb.rb.ts.rb +0 -9
  506. data/lib/rex/proto/smb/client.rb.ut.rb +0 -224
  507. data/lib/rex/proto/smb/constants.rb.ut.rb +0 -19
  508. data/lib/rex/proto/smb/simpleclient.rb.ut.rb +0 -129
  509. data/lib/rex/proto/smb/utils.rb.ut.rb +0 -21
  510. data/lib/rex/proto/tftp/server.rb.ut.rb +0 -29
  511. data/lib/rex/service_manager.rb.ut.rb +0 -33
  512. data/lib/rex/socket.rb.ut.rb +0 -108
  513. data/lib/rex/socket/comm/local.rb.ut.rb +0 -76
  514. data/lib/rex/socket/parameters.rb.ut.rb +0 -52
  515. data/lib/rex/socket/range_walker.rb.ut.rb +0 -56
  516. data/lib/rex/socket/ssl_tcp.rb.ut.rb +0 -40
  517. data/lib/rex/socket/ssl_tcp_server.rb.ut.rb +0 -62
  518. data/lib/rex/socket/subnet_walker.rb.ut.rb +0 -29
  519. data/lib/rex/socket/switch_board.rb.ut.rb +0 -53
  520. data/lib/rex/socket/tcp.rb.ut.rb +0 -65
  521. data/lib/rex/socket/tcp_server.rb.ut.rb +0 -45
  522. data/lib/rex/socket/udp.rb.ut.rb +0 -45
  523. data/lib/rex/test.rb +0 -36
  524. data/lib/rex/text.rb.ut.rb +0 -193
  525. data/lib/rex/transformer.rb.ut.rb +0 -39
  526. data/lib/rex/ui/text/color.rb.ut.rb +0 -19
  527. data/lib/rex/ui/text/progress_tracker.rb.ut.rb +0 -35
  528. data/lib/rex/ui/text/table.rb.ut.rb +0 -56
@@ -1,4 +1,3 @@
1
- #!/usr/bin/env ruby
2
1
  # -*- coding: binary -*-
3
2
 
4
3
  require 'rex/post/file'
@@ -24,309 +23,375 @@ module Fs
24
23
  ###
25
24
  class File < Rex::Post::Meterpreter::Extensions::Stdapi::Fs::IO
26
25
 
27
- include Rex::Post::File
28
-
29
- class << self
30
- attr_accessor :client
31
- end
32
-
33
- #
34
- # Return the directory separator, i.e.: "/" on unix, "\\" on windows
35
- #
36
- def File.separator()
37
- # The separator won't change, so cache it to prevent sending
38
- # unnecessary requests.
39
- return @separator if @separator
40
-
41
- request = Packet.create_request('stdapi_fs_separator')
42
-
43
- # Fall back to the old behavior of always assuming windows. This
44
- # allows meterpreter executables built before the addition of this
45
- # command to continue functioning.
46
- begin
47
- response = client.send_request(request)
48
- @separator = response.get_tlv_value(TLV_TYPE_STRING)
49
- rescue RequestError
50
- @separator = "\\"
51
- end
52
-
53
- return @separator
54
- end
55
-
56
- class << self
57
- alias :Separator :separator
58
- alias :SEPARATOR :separator
59
- end
60
-
61
- #
62
- # Search for files.
63
- #
64
- def File.search( root=nil, glob="*.*", recurse=true, timeout=-1 )
65
-
66
- files = ::Array.new
67
-
68
- request = Packet.create_request( 'stdapi_fs_search' )
69
-
70
- root = client.unicode_filter_decode(root) if root
71
- root = root.chomp( '\\' ) if root
72
-
73
- request.add_tlv( TLV_TYPE_SEARCH_ROOT, root )
74
- request.add_tlv( TLV_TYPE_SEARCH_GLOB, glob )
75
- request.add_tlv( TLV_TYPE_SEARCH_RECURSE, recurse )
76
-
77
- # we set the response timeout to -1 to wait indefinatly as a
78
- # search could take an indeterminate ammount of time to complete.
79
- response = client.send_request( request, timeout )
80
- if( response.result == 0 )
81
- response.each( TLV_TYPE_SEARCH_RESULTS ) do | results |
82
- files << {
83
- 'path' => client.unicode_filter_encode( results.get_tlv_value( TLV_TYPE_FILE_PATH ).chomp( '\\' ) ),
84
- 'name' => client.unicode_filter_encode( results.get_tlv_value( TLV_TYPE_FILE_NAME ) ),
85
- 'size' => results.get_tlv_value( TLV_TYPE_FILE_SIZE )
86
- }
87
- end
88
- end
89
-
90
- return files
91
- end
92
-
93
- #
94
- # Returns the base name of the supplied file path to the caller.
95
- #
96
- def File.basename(*a)
97
- path = a[0]
98
-
99
- # Allow both kinds of dir serparators since lots and lots of code
100
- # assumes one or the other so this ends up getting called with strings
101
- # like: "C:\\foo/bar"
102
- path =~ %r#.*[/\\](.*)$#
103
-
104
- Rex::FileUtils.clean_path($1 || path)
105
- end
106
-
107
- #
108
- # Expands a file path, substituting all environment variables, such as
109
- # %TEMP%.
110
- #
111
- def File.expand_path(path)
112
- request = Packet.create_request('stdapi_fs_file_expand_path')
113
-
114
- request.add_tlv(TLV_TYPE_FILE_PATH, client.unicode_filter_decode( path ))
115
-
116
- response = client.send_request(request)
117
-
118
- return client.unicode_filter_encode( response.get_tlv_value(TLV_TYPE_FILE_PATH) )
119
- end
120
-
121
-
122
- #
123
- # Calculates the MD5 (16-bytes raw) of a remote file
124
- #
125
- def File.md5(path)
126
- request = Packet.create_request('stdapi_fs_md5')
127
-
128
- request.add_tlv(TLV_TYPE_FILE_PATH, client.unicode_filter_decode( path ))
129
-
130
- response = client.send_request(request)
131
-
132
- # This is not really a file name, but a raw hash in bytes
133
- return response.get_tlv_value(TLV_TYPE_FILE_NAME)
134
- end
135
-
136
- #
137
- # Calculates the SHA1 (20-bytes raw) of a remote file
138
- #
139
- def File.sha1(path)
140
- request = Packet.create_request('stdapi_fs_sha1')
141
-
142
- request.add_tlv(TLV_TYPE_FILE_PATH, client.unicode_filter_decode( path ))
143
-
144
- response = client.send_request(request)
145
-
146
- # This is not really a file name, but a raw hash in bytes
147
- return response.get_tlv_value(TLV_TYPE_FILE_NAME)
148
- end
149
-
150
- #
151
- # Performs a stat on a file and returns a FileStat instance.
152
- #
153
- def File.stat(name)
154
- return client.fs.filestat.new( name )
155
- end
156
-
157
- #
158
- # Determines if a file exists and returns true/false
159
- #
160
- def File.exists?(name)
161
- r = client.fs.filestat.new(name) rescue nil
162
- r ? true : false
163
- end
164
-
165
- #
166
- # Performs a delete on the specified file.
167
- #
168
- def File.rm(name)
169
- request = Packet.create_request('stdapi_fs_delete_file')
170
-
171
- request.add_tlv(TLV_TYPE_FILE_PATH, client.unicode_filter_decode( name ))
172
-
173
- response = client.send_request(request)
174
-
175
- return response
176
- end
177
-
178
- #
179
- # Performs a delete on the specified file.
180
- #
181
- def File.unlink(name)
182
- return File.rm(name)
183
- end
184
-
185
- #
186
- # Upload one or more files to the remote computer the remote
187
- # directory supplied in destination.
188
- #
189
- def File.upload(destination, *src_files, &stat)
190
- src_files.each { |src|
191
- dest = destination
192
-
193
- stat.call('uploading', src, dest) if (stat)
194
- if (self.basename(destination) != ::File.basename(src))
195
- dest += self.separator + ::File.basename(src)
196
- end
197
-
198
- upload_file(dest, src)
199
- stat.call('uploaded', src, dest) if (stat)
200
- }
201
- end
202
-
203
- #
204
- # Upload a single file.
205
- #
206
- def File.upload_file(dest_file, src_file)
207
- # Open the file on the remote side for writing and read
208
- # all of the contents of the local file
209
- dest_fd = client.fs.file.new(dest_file, "wb")
210
- src_buf = ''
211
-
212
- ::File.open(src_file, 'rb') { |f|
213
- src_buf = f.read(f.stat.size)
214
- }
215
-
216
- begin
217
- dest_fd.write(src_buf)
218
- ensure
219
- dest_fd.close
220
- end
221
- end
222
-
223
- #
224
- # Download one or more files from the remote computer to the local
225
- # directory supplied in destination.
226
- #
227
- def File.download(dest, *src_files, &stat)
228
- src_files.each { |src|
229
- if (::File.basename(dest) != File.basename(src))
230
- # The destination when downloading is a local file so use this
231
- # system's separator
232
- dest += ::File::SEPARATOR + File.basename(src)
233
- end
234
-
235
- stat.call('downloading', src, dest) if (stat)
236
-
237
- download_file(dest, src)
238
-
239
- stat.call('downloaded', src, dest) if (stat)
240
- }
241
- end
242
-
243
- #
244
- # Download a single file.
245
- #
246
- def File.download_file(dest_file, src_file)
247
- src_fd = client.fs.file.new(src_file, "rb")
248
- dir = ::File.dirname(dest_file)
249
- ::FileUtils.mkdir_p(dir) if dir and not ::File.directory?(dir)
250
-
251
- dst_fd = ::File.new(dest_file, "wb")
252
-
253
- # Keep transferring until EOF is reached...
254
- begin
255
- while ((data = src_fd.read) != nil)
256
- dst_fd.write(data)
257
- end
258
- rescue EOFError
259
- ensure
260
- src_fd.close
261
- dst_fd.close
262
- end
263
- end
264
-
265
- ##
266
- #
267
- # Constructor
268
- #
269
- ##
270
-
271
- #
272
- # Initializes and opens the specified file with the specified permissions.
273
- #
274
- def initialize(name, mode = "r", perms = 0)
275
- self.client = self.class.client
276
- self.filed = _open(name, mode, perms)
277
- end
278
-
279
- ##
280
- #
281
- # IO implementators
282
- #
283
- ##
284
-
285
- #
286
- # Returns whether or not the file has reach EOF.
287
- #
288
- def eof
289
- return self.filed.eof
290
- end
291
-
292
- #
293
- # Returns the current position of the file pointer.
294
- #
295
- def pos
296
- return self.filed.tell
297
- end
298
-
299
- #
300
- # Synonym for sysseek.
301
- #
302
- def seek(offset, whence = ::IO::SEEK_SET)
303
- return self.sysseek(offset, whence)
304
- end
305
-
306
- #
307
- # Seeks to the supplied offset based on the supplied relativity.
308
- #
309
- def sysseek(offset, whence = ::IO::SEEK_SET)
310
- return self.filed.seek(offset, whence)
311
- end
26
+ include Rex::Post::File
27
+
28
+ class << self
29
+ attr_accessor :client
30
+ end
31
+
32
+ #
33
+ # Return the directory separator, i.e.: "/" on unix, "\\" on windows
34
+ #
35
+ def File.separator()
36
+ # The separator won't change, so cache it to prevent sending
37
+ # unnecessary requests.
38
+ return @separator if @separator
39
+
40
+ request = Packet.create_request('stdapi_fs_separator')
41
+
42
+ # Fall back to the old behavior of always assuming windows. This
43
+ # allows meterpreter executables built before the addition of this
44
+ # command to continue functioning.
45
+ begin
46
+ response = client.send_request(request)
47
+ @separator = response.get_tlv_value(TLV_TYPE_STRING)
48
+ rescue RequestError
49
+ @separator = "\\"
50
+ end
51
+
52
+ return @separator
53
+ end
54
+
55
+ class << self
56
+ alias :Separator :separator
57
+ alias :SEPARATOR :separator
58
+ end
59
+
60
+ #
61
+ # Search for files matching +glob+ starting in directory +root+.
62
+ #
63
+ # Returns an Array (possibly empty) of Hashes. Each element has the following
64
+ # keys:
65
+ # 'path':: The directory in which the file was found
66
+ # 'name':: File name
67
+ # 'size':: Size of the file, in bytes
68
+ #
69
+ # Example:
70
+ # client.fs.file.search(client.fs.dir.pwd, "*.txt")
71
+ # # => [{"path"=>"C:\\Documents and Settings\\user\\Desktop", "name"=>"foo.txt", "size"=>0}]
72
+ #
73
+ # Raises a RequestError if +root+ is not a directory.
74
+ #
75
+ def File.search( root=nil, glob="*.*", recurse=true, timeout=-1 )
76
+
77
+ files = ::Array.new
78
+
79
+ request = Packet.create_request( 'stdapi_fs_search' )
80
+
81
+ root = client.unicode_filter_decode(root) if root
82
+ root = root.chomp( '\\' ) if root
83
+
84
+ request.add_tlv( TLV_TYPE_SEARCH_ROOT, root )
85
+ request.add_tlv( TLV_TYPE_SEARCH_GLOB, glob )
86
+ request.add_tlv( TLV_TYPE_SEARCH_RECURSE, recurse )
87
+
88
+ # we set the response timeout to -1 to wait indefinatly as a
89
+ # search could take an indeterminate ammount of time to complete.
90
+ response = client.send_request( request, timeout )
91
+ if( response.result == 0 )
92
+ response.each( TLV_TYPE_SEARCH_RESULTS ) do | results |
93
+ files << {
94
+ 'path' => client.unicode_filter_encode( results.get_tlv_value( TLV_TYPE_FILE_PATH ).chomp( '\\' ) ),
95
+ 'name' => client.unicode_filter_encode( results.get_tlv_value( TLV_TYPE_FILE_NAME ) ),
96
+ 'size' => results.get_tlv_value( TLV_TYPE_FILE_SIZE )
97
+ }
98
+ end
99
+ end
100
+
101
+ return files
102
+ end
103
+
104
+ #
105
+ # Returns the base name of the supplied file path to the caller.
106
+ #
107
+ def File.basename(*a)
108
+ path = a[0]
109
+
110
+ # Allow both kinds of dir serparators since lots and lots of code
111
+ # assumes one or the other so this ends up getting called with strings
112
+ # like: "C:\\foo/bar"
113
+ path =~ %r#.*[/\\](.*)$#
114
+
115
+ Rex::FileUtils.clean_path($1 || path)
116
+ end
117
+
118
+ #
119
+ # Expands a file path, substituting all environment variables, such as
120
+ # %TEMP%.
121
+ #
122
+ # Examples:
123
+ # client.fs.file.expand_path("%appdata%")
124
+ # # => "C:\\Documents and Settings\\user\\Application Data"
125
+ # client.fs.file.expand_path("asdf")
126
+ # # => "asdf"
127
+ #
128
+ # NOTE: This method is fairly specific to Windows. It has next to no relation
129
+ # to the ::File.expand_path method! In particular, it does *not* do ~
130
+ # expansion or environment variable expansion on non-Windows systems. For
131
+ # these reasons, this method may be deprecated in the future. Use it with
132
+ # caution.
133
+ #
134
+ def File.expand_path(path)
135
+ request = Packet.create_request('stdapi_fs_file_expand_path')
136
+
137
+ request.add_tlv(TLV_TYPE_FILE_PATH, client.unicode_filter_decode( path ))
138
+
139
+ response = client.send_request(request)
140
+
141
+ return client.unicode_filter_encode( response.get_tlv_value(TLV_TYPE_FILE_PATH) )
142
+ end
143
+
144
+
145
+ #
146
+ # Calculates the MD5 (16-bytes raw) of a remote file
147
+ #
148
+ def File.md5(path)
149
+ request = Packet.create_request('stdapi_fs_md5')
150
+
151
+ request.add_tlv(TLV_TYPE_FILE_PATH, client.unicode_filter_decode( path ))
152
+
153
+ response = client.send_request(request)
154
+
155
+ # This is not really a file name, but a raw hash in bytes
156
+ return response.get_tlv_value(TLV_TYPE_FILE_NAME)
157
+ end
158
+
159
+ #
160
+ # Calculates the SHA1 (20-bytes raw) of a remote file
161
+ #
162
+ def File.sha1(path)
163
+ request = Packet.create_request('stdapi_fs_sha1')
164
+
165
+ request.add_tlv(TLV_TYPE_FILE_PATH, client.unicode_filter_decode( path ))
166
+
167
+ response = client.send_request(request)
168
+
169
+ # This is not really a file name, but a raw hash in bytes
170
+ return response.get_tlv_value(TLV_TYPE_FILE_NAME)
171
+ end
172
+
173
+ #
174
+ # Performs a stat on a file and returns a FileStat instance.
175
+ #
176
+ def File.stat(name)
177
+ return client.fs.filestat.new( name )
178
+ end
179
+
180
+ #
181
+ # Returns true if the remote file +name+ exists, false otherwise
182
+ #
183
+ def File.exists?(name)
184
+ r = client.fs.filestat.new(name) rescue nil
185
+ r ? true : false
186
+ end
187
+
188
+ #
189
+ # Performs a delete on the remote file +name+
190
+ #
191
+ def File.rm(name)
192
+ request = Packet.create_request('stdapi_fs_delete_file')
193
+
194
+ request.add_tlv(TLV_TYPE_FILE_PATH, client.unicode_filter_decode( name ))
195
+
196
+ response = client.send_request(request)
197
+
198
+ return response
199
+ end
200
+
201
+ class << self
202
+ alias unlink rm
203
+ alias delete rm
204
+ end
205
+
206
+ #
207
+ # Performs a rename from oldname to newname
208
+ #
209
+ def File.mv(oldname, newname)
210
+ request = Packet.create_request('stdapi_fs_file_move')
211
+
212
+ request.add_tlv(TLV_TYPE_FILE_NAME, client.unicode_filter_decode( oldname ))
213
+ request.add_tlv(TLV_TYPE_FILE_PATH, client.unicode_filter_decode( newname ))
214
+
215
+ response = client.send_request(request)
216
+
217
+ return response
218
+ end
219
+
220
+ class << self
221
+ alias move mv
222
+ alias rename mv
223
+ end
224
+
225
+ #
226
+ # Upload one or more files to the remote remote directory supplied in
227
+ # +destination+.
228
+ #
229
+ # If a block is given, it will be called before each file is uploaded and
230
+ # again when each upload is complete.
231
+ #
232
+ def File.upload(destination, *src_files, &stat)
233
+ src_files.each { |src|
234
+ dest = destination
235
+
236
+ stat.call('uploading', src, dest) if (stat)
237
+ if (self.basename(destination) != ::File.basename(src))
238
+ dest += self.separator + ::File.basename(src)
239
+ end
240
+
241
+ upload_file(dest, src)
242
+ stat.call('uploaded', src, dest) if (stat)
243
+ }
244
+ end
245
+
246
+ #
247
+ # Upload a single file.
248
+ #
249
+ def File.upload_file(dest_file, src_file)
250
+ # Open the file on the remote side for writing and read
251
+ # all of the contents of the local file
252
+ dest_fd = client.fs.file.new(dest_file, "wb")
253
+ src_buf = ''
254
+
255
+ ::File.open(src_file, 'rb') { |f|
256
+ src_buf = f.read(f.stat.size)
257
+ }
258
+
259
+ begin
260
+ dest_fd.write(src_buf)
261
+ ensure
262
+ dest_fd.close
263
+ end
264
+ end
265
+
266
+ #
267
+ # Download one or more files from the remote computer to the local
268
+ # directory supplied in destination.
269
+ #
270
+ # If a block is given, it will be called before each file is downloaded and
271
+ # again when each download is complete.
272
+ #
273
+ def File.download(dest, *src_files, &stat)
274
+ src_files.each { |src|
275
+ if (::File.basename(dest) != File.basename(src))
276
+ # The destination when downloading is a local file so use this
277
+ # system's separator
278
+ dest += ::File::SEPARATOR + File.basename(src)
279
+ end
280
+
281
+ stat.call('downloading', src, dest) if (stat)
282
+
283
+ download_file(dest, src)
284
+
285
+ stat.call('downloaded', src, dest) if (stat)
286
+ }
287
+ end
288
+
289
+ #
290
+ # Download a single file.
291
+ #
292
+ def File.download_file(dest_file, src_file)
293
+ src_fd = client.fs.file.new(src_file, "rb")
294
+ dir = ::File.dirname(dest_file)
295
+ ::FileUtils.mkdir_p(dir) if dir and not ::File.directory?(dir)
296
+
297
+ dst_fd = ::File.new(dest_file, "wb")
298
+
299
+ # Keep transferring until EOF is reached...
300
+ begin
301
+ while ((data = src_fd.read) != nil)
302
+ dst_fd.write(data)
303
+ end
304
+ rescue EOFError
305
+ ensure
306
+ src_fd.close
307
+ dst_fd.close
308
+ end
309
+ end
310
+
311
+ #
312
+ # With no associated block, File.open is a synonym for ::new. If the optional
313
+ # code block is given, it will be passed the opened file as an argument, and
314
+ # the File object will automatically be closed when the block terminates. In
315
+ # this instance, File.open returns the value of the block.
316
+ #
317
+ # (doc stolen from http://www.ruby-doc.org/core-1.9.3/File.html#method-c-open)
318
+ #
319
+ def File.open(name, mode="r", perms=0)
320
+ f = new(name, mode, perms)
321
+ if block_given?
322
+ ret = yield f
323
+ f.close
324
+ return ret
325
+ else
326
+ return f
327
+ end
328
+ end
329
+
330
+ ##
331
+ #
332
+ # Constructor
333
+ #
334
+ ##
335
+
336
+ #
337
+ # Initializes and opens the specified file with the specified permissions.
338
+ #
339
+ def initialize(name, mode = "r", perms = 0)
340
+ self.client = self.class.client
341
+ self.filed = _open(name, mode, perms)
342
+ end
343
+
344
+ ##
345
+ #
346
+ # IO implementators
347
+ #
348
+ ##
349
+
350
+ #
351
+ # Returns whether or not the file has reach EOF.
352
+ #
353
+ def eof
354
+ return self.filed.eof
355
+ end
356
+
357
+ #
358
+ # Returns the current position of the file pointer.
359
+ #
360
+ def pos
361
+ return self.filed.tell
362
+ end
363
+
364
+ #
365
+ # Synonym for sysseek.
366
+ #
367
+ def seek(offset, whence = ::IO::SEEK_SET)
368
+ return self.sysseek(offset, whence)
369
+ end
370
+
371
+ #
372
+ # Seeks to the supplied offset based on the supplied relativity.
373
+ #
374
+ def sysseek(offset, whence = ::IO::SEEK_SET)
375
+ return self.filed.seek(offset, whence)
376
+ end
312
377
 
313
378
  protected
314
379
 
315
- ##
316
- #
317
- # Internal methods
318
- #
319
- ##
320
-
321
- #
322
- # Creates a File channel using the supplied information.
323
- #
324
- def _open(name, mode = "r", perms = 0)
325
- return Rex::Post::Meterpreter::Channels::Pools::File.open(
326
- self.client, name, mode, perms)
327
- end
328
-
329
- attr_accessor :client # :nodoc:
380
+ ##
381
+ #
382
+ # Internal methods
383
+ #
384
+ ##
385
+
386
+ #
387
+ # Creates a File channel using the supplied information.
388
+ #
389
+ def _open(name, mode = "r", perms = 0)
390
+ return Rex::Post::Meterpreter::Channels::Pools::File.open(
391
+ self.client, name, mode, perms)
392
+ end
393
+
394
+ attr_accessor :client # :nodoc:
330
395
 
331
396
  end
332
397