librex 0.0.68 → 0.0.70

data/lib/rex/post/meterpreter/extensions/stdapi/fs/file_stat.rb

@@ -1,4 +1,3 @@
-#!/usr/bin/env ruby
 # -*- coding: binary -*-
 
 require 'rex/post/file_stat'
@@ -19,85 +18,85 @@ module Fs
 ###
 class FileStat < Rex::Post::FileStat
 
-	class << self
-		attr_accessor :client
-	end
-
-	@@struct_stat = [
-	  'st_dev',     4,  # 0
-	  'st_ino',     2,  # 4
-	  'st_mode',    2,  # 6
-	  'st_nlink',   2,  # 8
-	  'st_uid',     2,  # 10
-	  'st_gid',     2,  # 12
-	  'pad1',       2,  # 14
-	  'st_rdev',    4,  # 16
-	  'st_size',    4,  # 20
-	  'st_atime',   8,  # 24
-	  'st_mtime',   8,  # 32
-	  'st_ctime',   8,  # 40
-	]
-
-	##
-	#
-	# Constructor
-	#
-	##
-
-	#
-	# Returns an instance of a FileStat object.
-	#
-	def initialize(file)
-		self.stathash = stat(file) if (file)
-	end
-
-	#
-	# Swaps in a new stat hash.
-	#
-	def update(stat_buf)
-		elem   = @@struct_stat
-		hash   = {}
-		offset = 0
-		index  = 0
-
-		while (index < elem.length)
-			size = elem[index + 1]
-
-			value   = stat_buf[offset, size].unpack(size == 2 ? 'v' : 'V')[0]
-			offset += size
-
-			hash[elem[index]] = value
-
-			index += 2
-		end
-
-		return (self.stathash = hash)
-	end
+  class << self
+    attr_accessor :client
+  end
+
+  @@struct_stat = [
+    'st_dev',     4,  # 0
+    'st_ino',     2,  # 4
+    'st_mode',    2,  # 6
+    'st_nlink',   2,  # 8
+    'st_uid',     2,  # 10
+    'st_gid',     2,  # 12
+    'pad1',       2,  # 14
+    'st_rdev',    4,  # 16
+    'st_size',    4,  # 20
+    'st_atime',   8,  # 24
+    'st_mtime',   8,  # 32
+    'st_ctime',   8,  # 40
+  ]
+
+  ##
+  #
+  # Constructor
+  #
+  ##
+
+  #
+  # Returns an instance of a FileStat object.
+  #
+  def initialize(file)
+    self.stathash = stat(file) if (file)
+  end
+
+  #
+  # Swaps in a new stat hash.
+  #
+  def update(stat_buf)
+    elem   = @@struct_stat
+    hash   = {}
+    offset = 0
+    index  = 0
+
+    while (index < elem.length)
+      size = elem[index + 1]
+
+      value   = stat_buf[offset, size].unpack(size == 2 ? 'v' : 'V')[0]
+      offset += size
+
+      hash[elem[index]] = value
+
+      index += 2
+    end
+
+    return (self.stathash = hash)
+  end
 
 protected
 
-	##
-	#
-	# Initializer
-	#
-	##
+  ##
+  #
+  # Initializer
+  #
+  ##
 
-	#
-	# Gets information about the supplied file and returns a populated
-	# hash to the requestor.
-	#
-	def stat(file)
-		request = Packet.create_request('stdapi_fs_stat')
+  #
+  # Gets information about the supplied file and returns a populated
+  # hash to the requestor.
+  #
+  def stat(file)
+    request = Packet.create_request('stdapi_fs_stat')
 
-		request.add_tlv(TLV_TYPE_FILE_PATH, self.class.client.unicode_filter_decode( file ))
+    request.add_tlv(TLV_TYPE_FILE_PATH, self.class.client.unicode_filter_decode( file ))
 
-		response = self.class.client.send_request(request)
-		stat_buf = response.get_tlv(TLV_TYPE_STAT_BUF).value
+    response = self.class.client.send_request(request)
+    stat_buf = response.get_tlv(TLV_TYPE_STAT_BUF).value
 
-		# Next, we go through the returned stat_buf and fix up the values
-		# and insert them into a hash
-		return update(stat_buf)
-	end
+    # Next, we go through the returned stat_buf and fix up the values
+    # and insert them into a hash
+    return update(stat_buf)
+  end
 
 end
 

data/lib/rex/post/meterpreter/extensions/stdapi/fs/io.rb

@@ -1,4 +1,3 @@
-#!/usr/bin/env ruby
 # -*- coding: binary -*-
 
 require 'rex/post/io'
@@ -19,30 +18,30 @@ module Fs
 ##
 class IO < Rex::Post::IO
 
-	#
-	# Read the specified number of bytes from the channel.
-	#
-	def sysread(length = nil)
-		self.filed.read(length)
-	end
-
-	alias read sysread
-
-	#
-	# Writes the supplied buffer to the channel.
-	#
-	def syswrite(buf)
-		self.filed.write(buf)
-	end
-
-	alias write syswrite
-
-	#
-	# Closes the channel.
-	#
-	def close
-		self.filed.close
-	end
+  #
+  # Read the specified number of bytes from the channel.
+  #
+  def sysread(length = nil)
+    self.filed.read(length)
+  end
+
+  alias read sysread
+
+  #
+  # Writes the supplied buffer to the channel.
+  #
+  def syswrite(buf)
+    self.filed.write(buf)
+  end
+
+  alias write syswrite
+
+  #
+  # Closes the channel.
+  #
+  def close
+    self.filed.close
+  end
 
 end
 

data/lib/rex/post/meterpreter/extensions/stdapi/net/arp.rb

@@ -0,0 +1,59 @@
+# -*- coding: binary -*-
+
+require 'ipaddr'
+
+module Rex
+module Post
+module Meterpreter
+module Extensions
+module Stdapi
+module Net
+
+###
+#
+# This class represents an arp entry
+# on the remote machine.
+#
+###
+class Arp
+
+  ##
+  #
+  # Constructor
+  #
+  ##
+
+  #
+  # Returns an arp entry and initializes it to the supplied
+  # parameters.
+  #
+  def initialize(opts={})
+    self.ip_addr   = IPAddr.new_ntoh(opts[:ip_addr]).to_s
+    self.mac_addr  = mac_to_string(opts[:mac_addr])
+    self.interface = opts[:interface]
+  end
+
+  def mac_to_string(mac_addr)
+    macocts = []
+    mac_addr.each_byte { |o| macocts << o }
+    macocts += [0] * (6 - macocts.size) if macocts.size < 6
+    return sprintf("%02x:%02x:%02x:%02x:%02x:%02x",
+      macocts[0], macocts[1], macocts[2],
+      macocts[3], macocts[4], macocts[5])
+  end
+
+  #
+  # The ip address corresponding to the arp address.
+  #
+  attr_accessor :ip_addr
+  #
+  # The physical (MAC) address of the ARP entry
+  #
+  attr_accessor :mac_addr
+  #
+  # The name of the interface.
+  #
+  attr_accessor :interface
+end
+
+end; end; end; end; end; end

data/lib/rex/post/meterpreter/extensions/stdapi/net/config.rb

@@ -1,8 +1,9 @@
-#!/usr/bin/env ruby
 # -*- coding: binary -*-
 
 require 'rex/post/meterpreter/extensions/stdapi/tlv'
+require 'rex/post/meterpreter/extensions/stdapi/net/arp'
 require 'rex/post/meterpreter/extensions/stdapi/net/route'
+require 'rex/post/meterpreter/extensions/stdapi/net/netstat'
 require 'rex/post/meterpreter/extensions/stdapi/net/interface'
 
 module Rex
@@ -21,157 +22,234 @@ module Net
 ###
 class Config
 
-	##
-	#
-	# Constructor
-	#
-	##
-
-	#
-	# Initializes a Config instance that is used to get information about the
-	# network configuration of the remote machine.
-	#
-	def initialize(client)
-		self.client = client
-	end
-
-	##
-	#
-	# Interfaces
-	#
-	##
-
-	#
-	# Enumerates each interface.
-	#
-	def each_interface(&block)
-		get_interfaces().each(&block)
-	end
-
-	#
-	# Returns an array of network interfaces with each element.
-	#
-	# being an Interface
-	def get_interfaces
-		request = Packet.create_request('stdapi_net_config_get_interfaces')
-		ifaces  = []
-
-		response = client.send_request(request)
-
-		response.each(TLV_TYPE_NETWORK_INTERFACE) { |iface|
-			addrs = []
-			netmasks = []
-			scopes = []
-			while (a = iface.get_tlv_value(TLV_TYPE_IP, addrs.length))
-				# Netmasks aren't tightly associated with addresses, they're
-				# just thrown all together in the interface TLV ordered to
-				# match up. This could be done better by creating another
-				# GroupTlv type for addresses containing an address, a netmask,
-				# and possibly a scope.
-				n = iface.get_tlv_value(TLV_TYPE_NETMASK, addrs.length)
-				if (n.nil?)
-					# Some systems can't report a netmask, only a network
-					# prefix, so figure out the netmask from that.
-					n = iface.get_tlv_value(TLV_TYPE_IP_PREFIX, addrs.length)
-					if n
-						n = Rex::Socket.bit2netmask(n, !!(a.length == 16))
-					end
-				else
-					n = Rex::Socket.addr_ntoa(n)
-				end
-				s = iface.get_tlv_value(TLV_TYPE_IP6_SCOPE, addrs.length)
-				scopes[addrs.length] = s if s
-				netmasks[addrs.length] = n if n
-				addrs << Rex::Socket.addr_ntoa(a)
-			end
-			ifaces << Interface.new(
-					:index    => iface.get_tlv_value(TLV_TYPE_INTERFACE_INDEX),
-					:mac_addr => iface.get_tlv_value(TLV_TYPE_MAC_ADDRESS),
-					:mac_name => iface.get_tlv_value(TLV_TYPE_MAC_NAME),
-					:mtu      => iface.get_tlv_value(TLV_TYPE_INTERFACE_MTU),
-					:flags    => iface.get_tlv_value(TLV_TYPE_INTERFACE_FLAGS),
-					:addrs    => addrs,
-					:netmasks => netmasks,
-					:scopes   => scopes
-				)
-		}
-
-		return ifaces
-	end
-
-	alias interfaces get_interfaces
-
-	##
-	#
-	# Routing
-	#
-	##
-
-	#
-	# Enumerates each route.
-	#
-	def each_route(&block)
-		get_routes().each(&block)
-	end
-
-	#
-	# Returns an array of routes with each element being a Route.
-	#
-	def get_routes
-		request = Packet.create_request('stdapi_net_config_get_routes')
-		routes  = []
-
-		response = client.send_request(request)
-
-		# Build out the array of routes
-		# Note: This will include both IPv4 and IPv6 routes
-		response.each(TLV_TYPE_NETWORK_ROUTE) { |route|
-			routes << Route.new(
-					route.get_tlv_value(TLV_TYPE_SUBNET),
-					route.get_tlv_value(TLV_TYPE_NETMASK),
-					route.get_tlv_value(TLV_TYPE_GATEWAY),
-					route.get_tlv_value(TLV_TYPE_STRING),
-					route.get_tlv_value(TLV_TYPE_ROUTE_METRIC))
-		}
-
-		return routes
-	end
-
-	alias routes get_routes
-
-	#
-	# Adds a route to the target machine.
-	#
-	def add_route(subnet, netmask, gateway)
-		request = Packet.create_request('stdapi_net_config_add_route')
-
-		request.add_tlv(TLV_TYPE_SUBNET_STRING, subnet)
-		request.add_tlv(TLV_TYPE_NETMASK_STRING, netmask)
-		request.add_tlv(TLV_TYPE_GATEWAY_STRING, gateway)
-
-		response = client.send_request(request)
-
-		return true
-	end
-
-	#
-	# Removes a route from the target machine.
-	#
-	def remove_route(subnet, netmask, gateway)
-		request = Packet.create_request('stdapi_net_config_remove_route')
-
-		request.add_tlv(TLV_TYPE_SUBNET_STRING, subnet)
-		request.add_tlv(TLV_TYPE_NETMASK_STRING, netmask)
-		request.add_tlv(TLV_TYPE_GATEWAY_STRING, gateway)
-
-		response = client.send_request(request)
-
-		return true
-	end
+  ##
+  #
+  # Constructor
+  #
+  ##
+
+  #
+  # Initializes a Config instance that is used to get information about the
+  # network configuration of the remote machine.
+  #
+  def initialize(client)
+    self.client = client
+  end
+
+  ##
+  #
+  # Interfaces
+  #
+  ##
+
+  #
+  # Enumerates each interface.
+  #
+  def each_interface(&block)
+    get_interfaces().each(&block)
+  end
+
+  # Returns an array of network interfaces with each element.
+  #
+  # @return [Array<Interface>]
+  def get_interfaces
+    request = Packet.create_request('stdapi_net_config_get_interfaces')
+    ifaces  = []
+
+    response = client.send_request(request)
+
+    response.each(TLV_TYPE_NETWORK_INTERFACE) { |iface|
+      addrs = []
+      netmasks = []
+      scopes = []
+      while (a = iface.get_tlv_value(TLV_TYPE_IP, addrs.length))
+        # Netmasks aren't tightly associated with addresses, they're
+        # just thrown all together in the interface TLV ordered to
+        # match up. This could be done better by creating another
+        # GroupTlv type for addresses containing an address, a netmask,
+        # and possibly a scope.
+        n = iface.get_tlv_value(TLV_TYPE_NETMASK, addrs.length)
+        if (n.nil?)
+          # Some systems can't report a netmask, only a network
+          # prefix, so figure out the netmask from that.
+          n = iface.get_tlv_value(TLV_TYPE_IP_PREFIX, addrs.length)
+          if n
+            n = Rex::Socket.bit2netmask(n, !!(a.length == 16))
+          end
+        else
+          n = Rex::Socket.addr_ntoa(n)
+        end
+        s = iface.get_tlv_value(TLV_TYPE_IP6_SCOPE, addrs.length)
+        scopes[addrs.length] = s if s
+        netmasks[addrs.length] = n if n
+        addrs << Rex::Socket.addr_ntoa(a)
+      end
+      ifaces << Interface.new(
+          :index    => iface.get_tlv_value(TLV_TYPE_INTERFACE_INDEX),
+          :mac_addr => iface.get_tlv_value(TLV_TYPE_MAC_ADDRESS),
+          :mac_name => iface.get_tlv_value(TLV_TYPE_MAC_NAME),
+          :mtu      => iface.get_tlv_value(TLV_TYPE_INTERFACE_MTU),
+          :flags    => iface.get_tlv_value(TLV_TYPE_INTERFACE_FLAGS),
+          :addrs    => addrs,
+          :netmasks => netmasks,
+          :scopes   => scopes
+        )
+    }
+
+    return ifaces
+  end
+
+  alias interfaces get_interfaces
+
+  ##
+  #
+  # Network connections
+  #
+  ##
+
+  #
+  # Returns an array of network connection entries with each element being a Netstat.
+  #
+
+  def get_netstat
+    request = Packet.create_request('stdapi_net_config_get_netstat')
+                netstat  = []
+
+    response = client.send_request(request)
+
+    # Build out the array of netstat
+    response.each(TLV_TYPE_NETSTAT_ENTRY) { |connection|
+      netstat << Netstat.new(
+                      :local_addr   => connection.get_tlv_value(TLV_TYPE_LOCAL_HOST_RAW),
+          :remote_addr  => connection.get_tlv_value(TLV_TYPE_PEER_HOST_RAW),
+          :local_port   => connection.get_tlv_value(TLV_TYPE_LOCAL_PORT),
+          :remote_port  => connection.get_tlv_value(TLV_TYPE_PEER_PORT),
+          :protocol     => connection.get_tlv_value(TLV_TYPE_MAC_NAME), # tcp/tcp6/udp/udp6
+          :state        => connection.get_tlv_value(TLV_TYPE_SUBNET_STRING),
+          :uid          => connection.get_tlv_value(TLV_TYPE_PID),
+          :inode        => connection.get_tlv_value(TLV_TYPE_ROUTE_METRIC),
+          :pid_name     => connection.get_tlv_value(TLV_TYPE_PROCESS_NAME)
+          )
+    }
+
+    return netstat
+  end
+
+  alias netstat get_netstat
+
+  ##
+  #
+  # Routing
+  #
+  ##
+
+  #
+  # Returns an array of arp entries with each element being an Arp.
+  #
+
+  def get_arp_table
+    request = Packet.create_request('stdapi_net_config_get_arp_table')
+                arps  = []
+
+    response = client.send_request(request)
+
+    # Build out the array of arp
+    response.each(TLV_TYPE_ARP_ENTRY) { |arp|
+      arps << Arp.new(
+          :ip_addr   => arp.get_tlv_value(TLV_TYPE_IP),
+          :mac_addr  => arp.get_tlv_value(TLV_TYPE_MAC_ADDRESS),
+          :interface => arp.get_tlv_value(TLV_TYPE_MAC_NAME)
+          )
+    }
+
+    return arps
+  end
+
+  alias arp_table get_arp_table
+
+  #
+  # Enumerates each route.
+  #
+  def each_route(&block)
+    get_routes().each(&block)
+  end
+
+  #
+  # Returns an array of routes with each element being a Route.
+  #
+  def get_routes
+    request = Packet.create_request('stdapi_net_config_get_routes')
+    routes  = []
+
+    response = client.send_request(request)
+
+    # Build out the array of routes
+    # Note: This will include both IPv4 and IPv6 routes
+    response.each(TLV_TYPE_NETWORK_ROUTE) { |route|
+      routes << Route.new(
+          route.get_tlv_value(TLV_TYPE_SUBNET),
+          route.get_tlv_value(TLV_TYPE_NETMASK),
+          route.get_tlv_value(TLV_TYPE_GATEWAY),
+          route.get_tlv_value(TLV_TYPE_STRING),
+          route.get_tlv_value(TLV_TYPE_ROUTE_METRIC))
+    }
+
+    return routes
+  end
+
+  alias routes get_routes
+
+  #
+  # Adds a route to the target machine.
+  #
+  def add_route(subnet, netmask, gateway)
+    request = Packet.create_request('stdapi_net_config_add_route')
+
+    request.add_tlv(TLV_TYPE_SUBNET_STRING, subnet)
+    request.add_tlv(TLV_TYPE_NETMASK_STRING, netmask)
+    request.add_tlv(TLV_TYPE_GATEWAY_STRING, gateway)
+
+    response = client.send_request(request)
+
+    return true
+  end
+
+  #
+  # Removes a route from the target machine.
+  #
+  def remove_route(subnet, netmask, gateway)
+    request = Packet.create_request('stdapi_net_config_remove_route')
+
+    request.add_tlv(TLV_TYPE_SUBNET_STRING, subnet)
+    request.add_tlv(TLV_TYPE_NETMASK_STRING, netmask)
+    request.add_tlv(TLV_TYPE_GATEWAY_STRING, gateway)
+
+    response = client.send_request(request)
+
+    return true
+  end
+
+  #
+  # Get's the current proxy configuration
+  #
+  def get_proxy_config()
+    request = Packet.create_request('stdapi_net_config_get_proxy')
+
+    response = client.send_request(request)
+
+    proxy_config = {
+      :autodetect    => response.get_tlv_value(TLV_TYPE_PROXY_CFG_AUTODETECT),
+      :autoconfigurl => response.get_tlv_value(TLV_TYPE_PROXY_CFG_AUTOCONFIGURL),
+      :proxy         => response.get_tlv_value(TLV_TYPE_PROXY_CFG_PROXY),
+      :proxybypass   => response.get_tlv_value(TLV_TYPE_PROXY_CFG_PROXYBYPASS)
+    }
+
+    return proxy_config
+  end
 
 protected
 
-	attr_accessor :client # :nodoc:
+  attr_accessor :client # :nodoc:
 
 end