librex 0.0.68 → 0.0.70

data/lib/rex/post/meterpreter/extensions/stdapi/net/interface.rb

@@ -1,4 +1,3 @@
-#!/usr/bin/env ruby
 # -*- coding: binary -*-
 
 require 'ipaddr'
@@ -18,113 +17,113 @@ module Net
 ###
 class Interface
 
-	##
-	#
-	# Constructor
-	#
-	##
-
-	#
-	# Returns a logical interface and initializes it to the supplied
-	# parameters.
-	#
-	def initialize(opts={})
-		self.index    = opts[:index] || -1
-		self.mac_addr = opts[:mac_addr]
-		self.mac_name = opts[:mac_name]
-		self.mtu      = opts[:mtu]
-		self.flags    = opts[:flags]
-		self.addrs    = opts[:addrs]
-		self.netmasks = opts[:netmasks]
-		self.scopes   = opts[:scopes]
-	end
-
-	#
-	# Returns a pretty string representation of the interface's properties.
-	#
-	def pretty
-		macocts = []
-		mac_addr.each_byte { |o| macocts << o }
-		macocts += [0] * (6 - macocts.size) if macocts.size < 6
-
-		info = [
-			["Name"         , mac_name  ],
-			["Hardware MAC" , sprintf("%02x:%02x:%02x:%02x:%02x:%02x",
-				macocts[0], macocts[1], macocts[2],
-				macocts[3], macocts[4], macocts[5])],
-			["MTU"          , mtu       ],
-			["Flags"        , flags     ],
-		]
-
-		# If all went as planned, addrs and netmasks will have the same number
-		# of elements and be properly ordered such that they match up
-		# correctly.
-		addr_masks = addrs.zip(netmasks)
-
-		addr_masks.select { |a| Rex::Socket.is_ipv4?(a[0]) }.each { |a|
-			info << [ "IPv4 Address", a[0] ]
-			info << [ "IPv4 Netmask", a[1] ]
-		}
-		addr_masks.select { |a| Rex::Socket.is_ipv6?(a[0]) }.each { |a|
-			info << [ "IPv6 Address", a[0] ]
-			info << [ "IPv6 Netmask", a[1] ]
-		}
-
-		pad = info.map{|i| i[0] }.max_by{|k|k.length}.length
-
-		ret = sprintf(
-				"Interface %2d\n" +
-				"============\n",
-				index
-			)
-
-		info.map {|k,v|
-			next if v.nil?
-			ret << k.ljust(pad) + " : #{v}\n"
-		}
-
-		ret
-	end
-
-	#
-	# The first address associated with this Interface
-	#
-	def ip
-		addrs.first
-	end
-
-	#
-	# The index of the interface.
-	#
-	attr_accessor :index
-	#
-	# An Array of IP addresses bound to the Interface.
-	#
-	attr_accessor :addrs
-	#
-	# The physical (MAC) address of the NIC.
-	#
-	attr_accessor :mac_addr
-	#
-	# The name of the interface.
-	#
-	attr_accessor :mac_name
-	#
-	# The MTU associated with the interface.
-	#
-	attr_accessor :mtu
-	#
-	# The flags associated with the interface.
-	#
-	attr_accessor :flags
-	#
-	# An Array of netmasks. This will have the same number of elements as #addrs
-	#
-	attr_accessor :netmasks
-	#
-	# An Array of IPv6 address scopes. This will have the same number of elements as #addrs
-	#
-	attr_accessor :scopes
+  ##
+  #
+  # Constructor
+  #
+  ##
+
+  #
+  # Returns a logical interface and initializes it to the supplied
+  # parameters.
+  #
+  def initialize(opts={})
+    self.index    = opts[:index] || -1
+    self.mac_addr = opts[:mac_addr]
+    self.mac_name = opts[:mac_name]
+    self.mtu      = opts[:mtu]
+    self.flags    = opts[:flags]
+    self.addrs    = opts[:addrs]
+    self.netmasks = opts[:netmasks]
+    self.scopes   = opts[:scopes]
+  end
+
+  #
+  # Returns a pretty string representation of the interface's properties.
+  #
+  def pretty
+    macocts = []
+    mac_addr.each_byte { |o| macocts << o }
+    macocts += [0] * (6 - macocts.size) if macocts.size < 6
+
+    info = [
+      ["Name"         , mac_name  ],
+      ["Hardware MAC" , sprintf("%02x:%02x:%02x:%02x:%02x:%02x",
+        macocts[0], macocts[1], macocts[2],
+        macocts[3], macocts[4], macocts[5])],
+      ["MTU"          , mtu       ],
+      ["Flags"        , flags     ],
+    ]
+
+    # If all went as planned, addrs and netmasks will have the same number
+    # of elements and be properly ordered such that they match up
+    # correctly.
+    addr_masks = addrs.zip(netmasks)
+
+    addr_masks.select { |a| Rex::Socket.is_ipv4?(a[0]) }.each { |a|
+      info << [ "IPv4 Address", a[0] ]
+      info << [ "IPv4 Netmask", a[1] ]
+    }
+    addr_masks.select { |a| Rex::Socket.is_ipv6?(a[0]) }.each { |a|
+      info << [ "IPv6 Address", a[0] ]
+      info << [ "IPv6 Netmask", a[1] ]
+    }
+
+    pad = info.map{|i| i[0] }.max_by{|k|k.length}.length
+
+    ret = sprintf(
+        "Interface %2d\n" +
+        "============\n",
+        index
+      )
+
+    info.map {|k,v|
+      next if v.nil?
+      ret << k.ljust(pad) + " : #{v}\n"
+    }
+
+    ret
+  end
+
+  #
+  # The first address associated with this Interface
+  #
+  def ip
+    addrs.first
+  end
+
+  #
+  # The index of the interface.
+  #
+  attr_accessor :index
+  #
+  # An Array of IP addresses bound to the Interface.
+  #
+  attr_accessor :addrs
+  #
+  # The physical (MAC) address of the NIC.
+  #
+  attr_accessor :mac_addr
+  #
+  # The name of the interface.
+  #
+  attr_accessor :mac_name
+  #
+  # The MTU associated with the interface.
+  #
+  attr_accessor :mtu
+  #
+  # The flags associated with the interface.
+  #
+  attr_accessor :flags
+  #
+  # An Array of netmasks. This will have the same number of elements as #addrs
+  #
+  attr_accessor :netmasks
+  #
+  # An Array of IPv6 address scopes. This will have the same number of elements as #addrs
+  #
+  attr_accessor :scopes
 end
 
 end; end; end; end; end; end

data/lib/rex/post/meterpreter/extensions/stdapi/net/netstat.rb

@@ -0,0 +1,97 @@
+# -*- coding: binary -*-
+
+require 'ipaddr'
+
+module Rex
+module Post
+module Meterpreter
+module Extensions
+module Stdapi
+module Net
+
+###
+#
+# This class represents a connection (listening, connected)
+# on the remote machine.
+#
+###
+class Netstat
+
+  ##
+  #
+  # Constructor
+  #
+  ##
+
+  #
+  # Returns a netstat entry and initializes it to the supplied
+  # parameters.
+  #
+  def initialize(opts={})
+    self.local_addr   = IPAddr.new_ntoh(opts[:local_addr]).to_s
+    self.remote_addr  = IPAddr.new_ntoh(opts[:remote_addr]).to_s
+    self.local_port   = opts[:local_port]
+    self.remote_port  = opts[:remote_port]
+    self.protocol     = opts[:protocol]
+    self.state        = opts[:state]
+    self.uid          = opts[:uid] || 0
+    self.inode        = opts[:inode] || 0
+    self.pid_name     = opts[:pid_name]
+
+    self.local_addr_str  = sprintf("%s:%d",self.local_addr, self.local_port)
+    if self.remote_port == 0
+      port = "*"
+    else
+      port = self.remote_port.to_s
+    end
+    self.remote_addr_str = sprintf("%s:%s",self.remote_addr, port)
+  end
+
+
+  #
+  # The local address of the connection
+  #
+  attr_accessor :local_addr
+  #
+  # The remote address (peer) of the connection
+  #
+  attr_accessor :remote_addr
+  #
+  # The local port of the connection.
+  #
+  attr_accessor :local_port
+  #
+  # The remote port of the connection.
+  #
+  attr_accessor :remote_port
+  #
+  # The protocol type (tcp/tcp6/udp/udp6)
+  #
+  attr_accessor :protocol
+  #
+  # The state  of the connection (close, listening, syn_sent...)
+  #
+  attr_accessor :state
+  #
+  # The uid of the user who started the process to which the connection belongs to
+  #
+  attr_accessor :uid
+  #
+  # The socket inode
+  #
+  attr_accessor :inode
+  #
+  # The name of the process to which the connection belongs to
+  #
+  attr_accessor :pid_name
+  #
+  # The local address of the connection plus the port
+  #
+  attr_accessor :local_addr_str
+  #
+  # The remote address (peer) of the connection plus the port or *
+  #
+  attr_accessor :remote_addr_str
+end
+
+end; end; end; end; end; end

data/lib/rex/post/meterpreter/extensions/stdapi/net/resolve.rb

@@ -0,0 +1,106 @@
+# -*- coding: binary -*-
+
+require 'rex/post/meterpreter/extensions/stdapi/tlv'
+
+module Rex
+module Post
+module Meterpreter
+module Extensions
+module Stdapi
+module Net
+
+###
+#
+# This class provides DNS resolution from the perspective
+# of the remote host.
+#
+###
+class Resolve
+
+  ##
+  #
+  # Constructor
+  #
+  ##
+
+  #
+  # Initializes a Resolve instance that is used to resolve network addresses
+  # on the remote machine.
+  #
+  def initialize(client)
+    self.client = client
+  end
+
+  def resolve_host(hostname, family=AF_INET)
+    request = Packet.create_request('stdapi_net_resolve_host')
+    request.add_tlv(TLV_TYPE_HOST_NAME, hostname)
+    request.add_tlv(TLV_TYPE_ADDR_TYPE, family)
+
+    response = client.send_request(request)
+
+    type = response.get_tlv_value(TLV_TYPE_ADDR_TYPE)
+    raw = response.get_tlv_value(TLV_TYPE_IP)
+
+    return raw_to_host_ip_pair(hostname, raw, type)
+  end
+
+  def resolve_hosts(hostnames, family=AF_INET)
+    request = Packet.create_request('stdapi_net_resolve_hosts')
+    request.add_tlv(TLV_TYPE_ADDR_TYPE, family)
+
+    hostnames.each do |hostname|
+      request.add_tlv(TLV_TYPE_HOST_NAME, hostname)
+    end
+
+    response = client.send_request(request)
+
+    hosts = []
+    raws = []
+    types = []
+
+    response.each(TLV_TYPE_IP) do |raw|
+      raws << raw
+    end
+
+    response.each(TLV_TYPE_ADDR_TYPE) do |type|
+      types << type
+    end
+
+    0.upto(hostnames.length - 1) do |i|
+      raw = raws[i]
+      type = types[i]
+      host = hostnames[i]
+
+      hosts << raw_to_host_ip_pair(host, raw.value, type.value)
+    end
+
+    return hosts
+  end
+
+  def raw_to_host_ip_pair(host, raw, type)
+    if raw.nil? or host.nil?
+      return nil
+    end
+
+    if raw.empty?
+      ip = nil
+    else
+      if type == AF_INET
+        ip = Rex::Socket.addr_ntoa(raw[0..3])
+      else
+        ip = Rex::Socket.addr_ntoa(raw[0..16])
+      end
+    end
+
+    result = { :hostname => host, :ip => ip }
+
+    return result
+  end
+
+protected
+
+  attr_accessor :client # :nodoc:
+
+end
+
+end; end; end; end; end; end

data/lib/rex/post/meterpreter/extensions/stdapi/net/route.rb

@@ -1,4 +1,3 @@
-#!/usr/bin/env ruby
 # -*- coding: binary -*-
 
 require 'ipaddr'
@@ -17,50 +16,50 @@ module Net
 ###
 class Route
 
-	##
-	#
-	# Constructor
-	#
-	##
+  ##
+  #
+  # Constructor
+  #
+  ##
 
-	#
-	# Initializes a route instance.
-	#
-	def initialize(subnet, netmask, gateway, interface='', metric=0)
-		self.subnet  = IPAddr.new_ntoh(subnet).to_s
-		self.netmask = IPAddr.new_ntoh(netmask).to_s
-		self.gateway = IPAddr.new_ntoh(gateway).to_s
-		self.interface = interface
-		self.metric = metric
-	end
+  #
+  # Initializes a route instance.
+  #
+  def initialize(subnet, netmask, gateway, interface='', metric=0)
+    self.subnet  = IPAddr.new_ntoh(subnet).to_s
+    self.netmask = IPAddr.new_ntoh(netmask).to_s
+    self.gateway = IPAddr.new_ntoh(gateway).to_s
+    self.interface = interface
+    self.metric = metric
+  end
 
-	#
-	# Provides a pretty version of the route.
-	#
-	def pretty
-		return sprintf("%16s %16s %16s %d %16s", subnet, netmask, gateway, metric, interface)
-	end
+  #
+  # Provides a pretty version of the route.
+  #
+  def pretty
+    return sprintf("%16s %16s %16s %d %16s", subnet, netmask, gateway, metric, interface)
+  end
 
-	#
-	# The subnet mask associated with the route.
-	#
-	attr_accessor :subnet
-	#
-	# The netmask of the subnet route.
-	#
-	attr_accessor :netmask
-	#
-	# The gateway to take for the subnet route.
-	#
-	attr_accessor :gateway
-	#
-	# The interface to take for the subnet route.
-	#
-	attr_accessor :interface
-	#
-	# The metric of the route.
-	#
-	attr_accessor :metric
+  #
+  # The subnet mask associated with the route.
+  #
+  attr_accessor :subnet
+  #
+  # The netmask of the subnet route.
+  #
+  attr_accessor :netmask
+  #
+  # The gateway to take for the subnet route.
+  #
+  attr_accessor :gateway
+  #
+  # The interface to take for the subnet route.
+  #
+  attr_accessor :interface
+  #
+  # The metric of the route.
+  #
+  attr_accessor :metric
 
 
 end