librex 0.0.68 → 0.0.70

data/lib/rex/post/meterpreter/extensions/stdapi/sys/event_log.rb

@@ -1,4 +1,3 @@
-#!/usr/bin/env ruby
 # -*- coding: binary -*-
 
 require 'rex/post/process'
@@ -23,171 +22,171 @@ module Sys
 ###
 class EventLog
 
-	class << self
-		attr_accessor :client
-	end
-
-	#
-	# Opens the supplied event log.
-	#
-	#--
-	# NOTE: should support UNCServerName sometime
-	#++
-	#
-	def EventLog.open(name)
-		request = Packet.create_request('stdapi_sys_eventlog_open')
-
-		request.add_tlv(TLV_TYPE_EVENT_SOURCENAME, name);
-
-		response = client.send_request(request)
-
-		return self.new(response.get_tlv_value(TLV_TYPE_EVENT_HANDLE))
-	end
-
-	##
-	#
-	# Event Log Instance Stuffs!
-	#
-	##
-
-	attr_accessor :handle # :nodoc:
-	attr_accessor :client # :nodoc:
-
-	public
-
-	#
-	# Initializes an instance of the eventlog manipulator.
-	#
-	def initialize(hand)
-		self.client = self.class.client
-		self.handle = hand
-		ObjectSpace.define_finalizer( self, self.class.finalize(self.client, self.handle) )
-	end
-
-	def self.finalize(client,handle)
-		proc { self.close(client,handle) }
-	end
-
-	#
-	# Return the number of records in the event log.
-	#
-	def length
-		request = Packet.create_request('stdapi_sys_eventlog_numrecords')
-
-		request.add_tlv(TLV_TYPE_EVENT_HANDLE, self.handle);
-
-		response = client.send_request(request)
-
-		return response.get_tlv_value(TLV_TYPE_EVENT_NUMRECORDS)
-	end
-
-	#
-	# the low level read function (takes flags, not hash, etc).
-	#
-	def _read(flags, offset = 0)
-		request = Packet.create_request('stdapi_sys_eventlog_read')
-
-		request.add_tlv(TLV_TYPE_EVENT_HANDLE, self.handle)
-		request.add_tlv(TLV_TYPE_EVENT_READFLAGS, flags)
-		request.add_tlv(TLV_TYPE_EVENT_RECORDOFFSET, offset)
-
-		response = client.send_request(request)
-
-		EventLogSubsystem::EventRecord.new(
-		  response.get_tlv_value(TLV_TYPE_EVENT_RECORDNUMBER),
-		  response.get_tlv_value(TLV_TYPE_EVENT_TIMEGENERATED),
-		  response.get_tlv_value(TLV_TYPE_EVENT_TIMEWRITTEN),
-		  response.get_tlv_value(TLV_TYPE_EVENT_ID),
-		  response.get_tlv_value(TLV_TYPE_EVENT_TYPE),
-		  response.get_tlv_value(TLV_TYPE_EVENT_CATEGORY),
-		  response.get_tlv_values(TLV_TYPE_EVENT_STRING),
-		  response.get_tlv_value(TLV_TYPE_EVENT_DATA)
-		)
-	end
-
-	#
-	# Read the eventlog forwards, meaning from oldest to newest.
-	# Returns a EventRecord, and throws an exception after no more records.
-	#
-	def read_forwards
-		_read(EVENTLOG_SEQUENTIAL_READ | EVENTLOG_FORWARDS_READ)
-	end
-
-	#
-	# Iterator for read_forwards.
-	#
-	def each_forwards
-		begin
-			loop do
-				yield(read_forwards)
-			end
-		rescue ::Exception
-		end
-	end
-
-	#
-	# Read the eventlog backwards, meaning from newest to oldest.
-	# Returns a EventRecord, and throws an exception after no more records.
-	#
-	def read_backwards
-		_read(EVENTLOG_SEQUENTIAL_READ | EVENTLOG_BACKWARDS_READ)
-	end
-
-	#
-	# Iterator for read_backwards.
-	#
-	def each_backwards
-		begin
-			loop do
-				yield(read_backwards)
-			end
-		rescue ::Exception
-		end
-	end
-
-	#
-	# Return the record number of the oldest event (not necessarily 1).
-	#
-	def oldest
-		request = Packet.create_request('stdapi_sys_eventlog_oldest')
-
-		request.add_tlv(TLV_TYPE_EVENT_HANDLE, self.handle);
-
-		response = client.send_request(request)
-
-		return response.get_tlv_value(TLV_TYPE_EVENT_RECORDNUMBER)
-	end
-
-	#
-	# Clear the specified event log (and return nil).
-	#
-	#--
-	# I should eventually support BackupFile
-	#++
-	#
-	def clear
-		request = Packet.create_request('stdapi_sys_eventlog_clear')
-
-		request.add_tlv(TLV_TYPE_EVENT_HANDLE, self.handle);
-
-		response = client.send_request(request)
-		return self
-	end
-
-	#
-	# Close the event log
-	#
-	def self.close(client, handle)
-		request = Packet.create_request('stdapi_sys_eventlog_close')
-		request.add_tlv(TLV_TYPE_EVENT_HANDLE, handle);
-		response = client.send_request(request, nil)
-		return nil
-	end
-
-	# Instance method
-	def close
-		self.class.close(self.client, self.handle)
-	end
+  class << self
+    attr_accessor :client
+  end
+
+  #
+  # Opens the supplied event log.
+  #
+  #--
+  # NOTE: should support UNCServerName sometime
+  #++
+  #
+  def EventLog.open(name)
+    request = Packet.create_request('stdapi_sys_eventlog_open')
+
+    request.add_tlv(TLV_TYPE_EVENT_SOURCENAME, name);
+
+    response = client.send_request(request)
+
+    return self.new(response.get_tlv_value(TLV_TYPE_EVENT_HANDLE))
+  end
+
+  ##
+  #
+  # Event Log Instance Stuffs!
+  #
+  ##
+
+  attr_accessor :handle # :nodoc:
+  attr_accessor :client # :nodoc:
+
+  public
+
+  #
+  # Initializes an instance of the eventlog manipulator.
+  #
+  def initialize(hand)
+    self.client = self.class.client
+    self.handle = hand
+    ObjectSpace.define_finalizer( self, self.class.finalize(self.client, self.handle) )
+  end
+
+  def self.finalize(client,handle)
+    proc { self.close(client,handle) }
+  end
+
+  #
+  # Return the number of records in the event log.
+  #
+  def length
+    request = Packet.create_request('stdapi_sys_eventlog_numrecords')
+
+    request.add_tlv(TLV_TYPE_EVENT_HANDLE, self.handle);
+
+    response = client.send_request(request)
+
+    return response.get_tlv_value(TLV_TYPE_EVENT_NUMRECORDS)
+  end
+
+  #
+  # the low level read function (takes flags, not hash, etc).
+  #
+  def _read(flags, offset = 0)
+    request = Packet.create_request('stdapi_sys_eventlog_read')
+
+    request.add_tlv(TLV_TYPE_EVENT_HANDLE, self.handle)
+    request.add_tlv(TLV_TYPE_EVENT_READFLAGS, flags)
+    request.add_tlv(TLV_TYPE_EVENT_RECORDOFFSET, offset)
+
+    response = client.send_request(request)
+
+    EventLogSubsystem::EventRecord.new(
+      response.get_tlv_value(TLV_TYPE_EVENT_RECORDNUMBER),
+      response.get_tlv_value(TLV_TYPE_EVENT_TIMEGENERATED),
+      response.get_tlv_value(TLV_TYPE_EVENT_TIMEWRITTEN),
+      response.get_tlv_value(TLV_TYPE_EVENT_ID),
+      response.get_tlv_value(TLV_TYPE_EVENT_TYPE),
+      response.get_tlv_value(TLV_TYPE_EVENT_CATEGORY),
+      response.get_tlv_values(TLV_TYPE_EVENT_STRING),
+      response.get_tlv_value(TLV_TYPE_EVENT_DATA)
+    )
+  end
+
+  #
+  # Read the eventlog forwards, meaning from oldest to newest.
+  # Returns a EventRecord, and throws an exception after no more records.
+  #
+  def read_forwards
+    _read(EVENTLOG_SEQUENTIAL_READ | EVENTLOG_FORWARDS_READ)
+  end
+
+  #
+  # Iterator for read_forwards.
+  #
+  def each_forwards
+    begin
+      loop do
+        yield(read_forwards)
+      end
+    rescue ::Exception
+    end
+  end
+
+  #
+  # Read the eventlog backwards, meaning from newest to oldest.
+  # Returns a EventRecord, and throws an exception after no more records.
+  #
+  def read_backwards
+    _read(EVENTLOG_SEQUENTIAL_READ | EVENTLOG_BACKWARDS_READ)
+  end
+
+  #
+  # Iterator for read_backwards.
+  #
+  def each_backwards
+    begin
+      loop do
+        yield(read_backwards)
+      end
+    rescue ::Exception
+    end
+  end
+
+  #
+  # Return the record number of the oldest event (not necessarily 1).
+  #
+  def oldest
+    request = Packet.create_request('stdapi_sys_eventlog_oldest')
+
+    request.add_tlv(TLV_TYPE_EVENT_HANDLE, self.handle);
+
+    response = client.send_request(request)
+
+    return response.get_tlv_value(TLV_TYPE_EVENT_RECORDNUMBER)
+  end
+
+  #
+  # Clear the specified event log (and return nil).
+  #
+  #--
+  # I should eventually support BackupFile
+  #++
+  #
+  def clear
+    request = Packet.create_request('stdapi_sys_eventlog_clear')
+
+    request.add_tlv(TLV_TYPE_EVENT_HANDLE, self.handle);
+
+    response = client.send_request(request)
+    return self
+  end
+
+  #
+  # Close the event log
+  #
+  def self.close(client, handle)
+    request = Packet.create_request('stdapi_sys_eventlog_close')
+    request.add_tlv(TLV_TYPE_EVENT_HANDLE, handle);
+    response = client.send_request(request, nil)
+    return nil
+  end
+
+  # Instance method
+  def close
+    self.class.close(self.client, self.handle)
+  end
 end
 
 end end end end end end

data/lib/rex/post/meterpreter/extensions/stdapi/sys/event_log_subsystem/event_record.rb

@@ -1,4 +1,3 @@
-#!/usr/bin/env ruby
 # -*- coding: binary -*-
 
 module Rex
@@ -16,26 +15,26 @@ module EventLogSubsystem
 ###
 class EventRecord
 
-	attr_reader :num, :generated, :written, :eventid
-	attr_reader :type, :category, :strings, :data
+  attr_reader :num, :generated, :written, :eventid
+  attr_reader :type, :category, :strings, :data
 
-	protected
+  protected
 
-	attr_writer :num, :generated, :written, :eventid
-	attr_writer :type, :category, :strings, :data
+  attr_writer :num, :generated, :written, :eventid
+  attr_writer :type, :category, :strings, :data
 
-	public
+  public
 
-	def initialize(recnum, timegen, timewri, id, type, cat, strs, data)
-		self.num       = recnum
-		self.generated = Time.at(timegen)
-		self.written   = Time.at(timewri)
-		self.eventid   = id
-		self.type      = type
-		self.category  = cat
-		self.strings   = strs
-		self.data      = data
-	end
+  def initialize(recnum, timegen, timewri, id, type, cat, strs, data)
+    self.num       = recnum
+    self.generated = Time.at(timegen)
+    self.written   = Time.at(timewri)
+    self.eventid   = id
+    self.type      = type
+    self.category  = cat
+    self.strings   = strs
+    self.data      = data
+  end
 
 end
 

data/lib/rex/post/meterpreter/extensions/stdapi/sys/power.rb

@@ -1,4 +1,3 @@
-#!/usr/bin/env ruby
 # -*- coding: binary -*-
 
 require 'rex/post/process'
@@ -21,41 +20,40 @@ module Sys
 ###
 class Power
 
-	class <<self
-		attr_accessor :client
-	end
-
-	#
-	# Calls ExitWindows on the remote machine with the supplied parameters.
-	#
-	def Power._exitwindows(flags, reason = 0) # :nodoc:
-		request = Packet.create_request('stdapi_sys_power_exitwindows')
-
-		request.add_tlv(TLV_TYPE_POWER_FLAGS, flags);
-		request.add_tlv(TLV_TYPE_POWER_REASON, reason);
-
-		response = client.send_request(request)
-
-		return self
-	end
-
-	#
-	# Reboots the remote machine.
-	#
-	def Power.reboot(reason = 0)
-		self._exitwindows(EWX_REBOOT, reason)
-	end
-
-	#
-	# Shuts down the remote machine.
-	#
-	def Power.shutdown(force = 0, reason = 0)
-		flags  = EWX_POWEROFF
-		flags |= EWX_FORCEIFHUNG if force == 1
-		flags |= EWX_FORCE       if force == 2
-
-		self._exitwindows(flags, reason)
-	end
+  class <<self
+    attr_accessor :client
+  end
+
+  #
+  # Calls ExitWindows on the remote machine with the supplied parameters.
+  #
+  def Power._exitwindows(flags, reason = 0, force = 0) # :nodoc:
+    request = Packet.create_request('stdapi_sys_power_exitwindows')
+
+    flags |= EWX_FORCEIFHUNG if force == 1
+    flags |= EWX_FORCE       if force == 2
+
+    request.add_tlv(TLV_TYPE_POWER_FLAGS, flags);
+    request.add_tlv(TLV_TYPE_POWER_REASON, reason);
+
+    response = client.send_request(request)
+
+    return response
+  end
+
+  #
+  # Reboots the remote machine.
+  #
+  def Power.reboot(force = 0, reason = 0)
+    self._exitwindows(EWX_REBOOT, reason, force)
+  end
+
+  #
+  # Shuts down the remote machine.
+  #
+  def Power.shutdown(force = 0, reason = 0)
+    self._exitwindows(EWX_POWEROFF, reason, force)
+  end
 
 end