librex 0.0.68 → 0.0.70

data/lib/rex/post/meterpreter/ui/console/command_dispatcher/priv.rb

@@ -13,46 +13,46 @@ module Ui
 ###
 class Console::CommandDispatcher::Priv
 
-	require 'rex/post/meterpreter/ui/console/command_dispatcher/priv/elevate'
-	require 'rex/post/meterpreter/ui/console/command_dispatcher/priv/passwd'
-	require 'rex/post/meterpreter/ui/console/command_dispatcher/priv/timestomp'
-
-	Klass = Console::CommandDispatcher::Priv
-
-	Dispatchers =
-		[
-			Klass::Elevate,
-			Klass::Passwd,
-			Klass::Timestomp,
-		]
-
-	include Console::CommandDispatcher
-
-	#
-	# Initializes an instance of the priv command interaction.
-	#
-	def initialize(shell)
-		super
-
-		Dispatchers.each { |d|
-			shell.enstack_dispatcher(d)
-		}
-	end
-
-	#
-	# List of supported commands.
-	#
-	def commands
-		{
-		}
-	end
-
-	#
-	# Name for this dispatcher
-	#
-	def name
-		"Privilege Escalation"
-	end
+  require 'rex/post/meterpreter/ui/console/command_dispatcher/priv/elevate'
+  require 'rex/post/meterpreter/ui/console/command_dispatcher/priv/passwd'
+  require 'rex/post/meterpreter/ui/console/command_dispatcher/priv/timestomp'
+
+  Klass = Console::CommandDispatcher::Priv
+
+  Dispatchers =
+    [
+      Klass::Elevate,
+      Klass::Passwd,
+      Klass::Timestomp,
+    ]
+
+  include Console::CommandDispatcher
+
+  #
+  # Initializes an instance of the priv command interaction.
+  #
+  def initialize(shell)
+    super
+
+    Dispatchers.each { |d|
+      shell.enstack_dispatcher(d)
+    }
+  end
+
+  #
+  # List of supported commands.
+  #
+  def commands
+    {
+    }
+  end
+
+  #
+  # Name for this dispatcher
+  #
+  def name
+    "Privilege Escalation"
+  end
 
 end
 

data/lib/rex/post/meterpreter/ui/console/command_dispatcher/priv/elevate.rb

@@ -13,83 +13,81 @@ module Ui
 ###
 class Console::CommandDispatcher::Priv::Elevate
 
-	Klass = Console::CommandDispatcher::Priv::Elevate
-
-	include Console::CommandDispatcher
-
-	ELEVATE_TECHNIQUE_NONE					= -1
-	ELEVATE_TECHNIQUE_ANY					= 0
-	ELEVATE_TECHNIQUE_SERVICE_NAMEDPIPE		= 1
-	ELEVATE_TECHNIQUE_SERVICE_NAMEDPIPE2	= 2
-	ELEVATE_TECHNIQUE_SERVICE_TOKENDUP		= 3
-	ELEVATE_TECHNIQUE_VULN_KITRAP0D			= 4
-
-	ELEVATE_TECHNIQUE_DESCRIPTION = [ 	"All techniques available",
-										"Service - Named Pipe Impersonation (In Memory/Admin)",
-										"Service - Named Pipe Impersonation (Dropper/Admin)",
-										"Service - Token Duplication (In Memory/Admin)",
-										"Exploit - KiTrap0D (In Memory/User)"
-									]
-	#
-	# List of supported commands.
-	#
-	def commands
-		{
-			"getsystem" => "Attempt to elevate your privilege to that of local system."
-		}
-	end
-
-	#
-	# Name for this dispatcher.
-	#
-	def name
-		"Priv: Elevate"
-	end
-
-
-	#
-	# Attempt to elevate the meterpreter to that of local system.
-	#
-	def cmd_getsystem( *args )
-
-		technique = ELEVATE_TECHNIQUE_ANY
-
-		desc = ""
-		ELEVATE_TECHNIQUE_DESCRIPTION.each_index { |i| desc += "\n\t\t#{i} : #{ELEVATE_TECHNIQUE_DESCRIPTION[i]}" }
-
-		getsystem_opts = Rex::Parser::Arguments.new(
-			"-h" => [ false, "Help Banner." ],
-			"-t" => [ true, "The technique to use. (Default to \'#{technique}\')." + desc ]
-		)
-
-		getsystem_opts.parse(args) { | opt, idx, val |
-			case opt
-				when "-h"
-					print_line( "Usage: getsystem [options]\n" )
-					print_line( "Attempt to elevate your privilege to that of local system." )
-					print_line( getsystem_opts.usage )
-					return
-				when "-t"
-					technique = val.to_i
-			end
-		}
-
-		if( technique < 0 or technique >= ELEVATE_TECHNIQUE_DESCRIPTION.length )
-			print_error( "Technique '#{technique}' is out of range." );
-			return false;
-		end
-
-		result = client.priv.getsystem( technique )
-
-		# got system?
-		if result[0]
-			print_line( "...got system (via technique #{result[1]})." );
-		else
-			print_line( "...failed to get system." );
-		end
-
-		return result
-	end
+  Klass = Console::CommandDispatcher::Priv::Elevate
+
+  include Console::CommandDispatcher
+
+  ELEVATE_TECHNIQUE_NONE					= -1
+  ELEVATE_TECHNIQUE_ANY					= 0
+  ELEVATE_TECHNIQUE_SERVICE_NAMEDPIPE		= 1
+  ELEVATE_TECHNIQUE_SERVICE_NAMEDPIPE2	= 2
+  ELEVATE_TECHNIQUE_SERVICE_TOKENDUP		= 3
+
+  ELEVATE_TECHNIQUE_DESCRIPTION = [ 	"All techniques available",
+                    "Service - Named Pipe Impersonation (In Memory/Admin)",
+                    "Service - Named Pipe Impersonation (Dropper/Admin)",
+                    "Service - Token Duplication (In Memory/Admin)"
+                  ]
+  #
+  # List of supported commands.
+  #
+  def commands
+    {
+      "getsystem" => "Attempt to elevate your privilege to that of local system."
+    }
+  end
+
+  #
+  # Name for this dispatcher.
+  #
+  def name
+    "Priv: Elevate"
+  end
+
+
+  #
+  # Attempt to elevate the meterpreter to that of local system.
+  #
+  def cmd_getsystem( *args )
+
+    technique = ELEVATE_TECHNIQUE_ANY
+
+    desc = ""
+    ELEVATE_TECHNIQUE_DESCRIPTION.each_index { |i| desc += "\n\t\t#{i} : #{ELEVATE_TECHNIQUE_DESCRIPTION[i]}" }
+
+    getsystem_opts = Rex::Parser::Arguments.new(
+      "-h" => [ false, "Help Banner." ],
+      "-t" => [ true, "The technique to use. (Default to \'#{technique}\')." + desc ]
+    )
+
+    getsystem_opts.parse(args) { | opt, idx, val |
+      case opt
+        when "-h"
+          print_line( "Usage: getsystem [options]\n" )
+          print_line( "Attempt to elevate your privilege to that of local system." )
+          print_line( getsystem_opts.usage )
+          return
+        when "-t"
+          technique = val.to_i
+      end
+    }
+
+    if( technique < 0 or technique >= ELEVATE_TECHNIQUE_DESCRIPTION.length )
+      print_error( "Technique '#{technique}' is out of range." );
+      return false;
+    end
+
+    result = client.priv.getsystem( technique )
+
+    # got system?
+    if result[0]
+      print_line( "...got system (via technique #{result[1]})." );
+    else
+      print_line( "...failed to get system." );
+    end
+
+    return result
+  end
 
 end
 

data/lib/rex/post/meterpreter/ui/console/command_dispatcher/priv/passwd.rb

@@ -13,36 +13,36 @@ module Ui
 ###
 class Console::CommandDispatcher::Priv::Passwd
 
-	Klass = Console::CommandDispatcher::Priv::Passwd
-
-	include Console::CommandDispatcher
-
-	#
-	# List of supported commands.
-	#
-	def commands
-		{
-			"hashdump" => "Dumps the contents of the SAM database"
-		}
-	end
-
-	#
-	# Name for this dispatcher.
-	#
-	def name
-		"Priv: Password database"
-	end
-
-	#
-	# Displays the contents of the SAM database
-	#
-	def cmd_hashdump(*args)
-		client.priv.sam_hashes.each { |user|
-			print_line("#{user}")
-		}
-		
-		return true
-	end
+  Klass = Console::CommandDispatcher::Priv::Passwd
+
+  include Console::CommandDispatcher
+
+  #
+  # List of supported commands.
+  #
+  def commands
+    {
+      "hashdump" => "Dumps the contents of the SAM database"
+    }
+  end
+
+  #
+  # Name for this dispatcher.
+  #
+  def name
+    "Priv: Password database"
+  end
+
+  #
+  # Displays the contents of the SAM database
+  #
+  def cmd_hashdump(*args)
+    client.priv.sam_hashes.each { |user|
+      print_line("#{user}")
+    }
+
+    return true
+  end
 
 end
 

data/lib/rex/post/meterpreter/ui/console/command_dispatcher/priv/timestomp.rb

@@ -14,116 +14,116 @@ module Ui
 ###
 class Console::CommandDispatcher::Priv::Timestomp
 
-	Klass = Console::CommandDispatcher::Priv::Timestomp
-
-	include Console::CommandDispatcher
-
-	@@timestomp_opts = Rex::Parser::Arguments.new(
-		"-m" => [ true,  "Set the \"last written\" time of the file" ],
-		"-a" => [ true,  "Set the \"last accessed\" time of the file" ],
-		"-c" => [ true,  "Set the \"creation\" time of the file" ],
-		"-e" => [ true,  "Set the \"mft entry modified\" time of the file" ],
-		"-z" => [ true,  "Set all four attributes (MACE) of the file" ],
-		"-f" => [ true,  "Set the MACE of attributes equal to the supplied file" ],
-		"-b" => [ false, "Set the MACE timestamps so that EnCase shows blanks" ],
-		"-r" => [ false, "Set the MACE timestamps recursively on a directory" ],
-		"-v" => [ false, "Display the UTC MACE values of the file" ],
-		"-h" => [ false, "Help banner" ])
-
-	#
-	# List of supported commands.
-	#
-	def commands
-		{
-			"timestomp" => "Manipulate file MACE attributes"
-		}
-	end
-
-	#
-	# Name for this dispatcher.
-	#
-	def name
-		"Priv: Timestomp"
-	end
-
-	#
-	# This command provides the same level of features that vinnie's command
-	# line timestomp interface provides with a similar argument set.
-	#
-	def cmd_timestomp(*args)
-		if (args.length < 2)
-			print_line("\nUsage: timestomp file_path OPTIONS\n" +
-				@@timestomp_opts.usage)
-			return
-		end
-
-		file_path = args.shift
-		modified  = nil
-		accessed  = nil
-		creation  = nil
-		emodified = nil
-
-		@@timestomp_opts.parse(args) { |opt, idx, val|
-			case opt
-				when "-m"
-					modified  = str_to_time(val)
-				when "-a"
-					accessed  = str_to_time(val)
-				when "-c"
-					creation  = str_to_time(val)
-				when "-e"
-					emodified = str_to_time(val)
-				when "-z"
-					print_line("#{val}")
-					modified  = str_to_time(val)
-					accessed  = str_to_time(val)
-					creation  = str_to_time(val)
-					emodified = str_to_time(val)
-				when "-f"
-					print_status("Setting MACE attributes on #{file_path} from #{val}")
-					client.priv.fs.set_file_mace_from_file(file_path, val)
-				when "-b"
-					print_status("Blanking file MACE attributes on #{file_path}")
-					client.priv.fs.blank_file_mace(file_path)
-				when "-r"
-					print_status("Blanking directory MACE attributes on #{file_path}")
-					client.priv.fs.blank_directory_mace(file_path)
-				when "-v"
-					hash = client.priv.fs.get_file_mace(file_path)
-
-					print_line("Modified      : #{hash['Modified']}")
-					print_line("Accessed      : #{hash['Accessed']}")
-					print_line("Created       : #{hash['Created']}")
-					print_line("Entry Modified: #{hash['Entry Modified']}")
-				when "-h"
-					print_line("\nUsage: timestomp file_path OPTIONS\n" +
-						@@timestomp_opts.usage)
-					return
-			end
-		}
-
-		# If any one of the four times were specified, change them.
-		if (modified or accessed or creation or emodified)
-			print_status("Setting specific MACE attributes on #{file_path}")
-			client.priv.fs.set_file_mace(file_path, modified, accessed,
-				creation, emodified)
-		end
-	end
+  Klass = Console::CommandDispatcher::Priv::Timestomp
+
+  include Console::CommandDispatcher
+
+  @@timestomp_opts = Rex::Parser::Arguments.new(
+    "-m" => [ true,  "Set the \"last written\" time of the file" ],
+    "-a" => [ true,  "Set the \"last accessed\" time of the file" ],
+    "-c" => [ true,  "Set the \"creation\" time of the file" ],
+    "-e" => [ true,  "Set the \"mft entry modified\" time of the file" ],
+    "-z" => [ true,  "Set all four attributes (MACE) of the file" ],
+    "-f" => [ true,  "Set the MACE of attributes equal to the supplied file" ],
+    "-b" => [ false, "Set the MACE timestamps so that EnCase shows blanks" ],
+    "-r" => [ false, "Set the MACE timestamps recursively on a directory" ],
+    "-v" => [ false, "Display the UTC MACE values of the file" ],
+    "-h" => [ false, "Help banner" ])
+
+  #
+  # List of supported commands.
+  #
+  def commands
+    {
+      "timestomp" => "Manipulate file MACE attributes"
+    }
+  end
+
+  #
+  # Name for this dispatcher.
+  #
+  def name
+    "Priv: Timestomp"
+  end
+
+  #
+  # This command provides the same level of features that vinnie's command
+  # line timestomp interface provides with a similar argument set.
+  #
+  def cmd_timestomp(*args)
+    if (args.length < 2)
+      print_line("\nUsage: timestomp file_path OPTIONS\n" +
+        @@timestomp_opts.usage)
+      return
+    end
+
+    file_path = args.shift
+    modified  = nil
+    accessed  = nil
+    creation  = nil
+    emodified = nil
+
+    @@timestomp_opts.parse(args) { |opt, idx, val|
+      case opt
+        when "-m"
+          modified  = str_to_time(val)
+        when "-a"
+          accessed  = str_to_time(val)
+        when "-c"
+          creation  = str_to_time(val)
+        when "-e"
+          emodified = str_to_time(val)
+        when "-z"
+          print_line("#{val}")
+          modified  = str_to_time(val)
+          accessed  = str_to_time(val)
+          creation  = str_to_time(val)
+          emodified = str_to_time(val)
+        when "-f"
+          print_status("Setting MACE attributes on #{file_path} from #{val}")
+          client.priv.fs.set_file_mace_from_file(file_path, val)
+        when "-b"
+          print_status("Blanking file MACE attributes on #{file_path}")
+          client.priv.fs.blank_file_mace(file_path)
+        when "-r"
+          print_status("Blanking directory MACE attributes on #{file_path}")
+          client.priv.fs.blank_directory_mace(file_path)
+        when "-v"
+          hash = client.priv.fs.get_file_mace(file_path)
+
+          print_line("Modified      : #{hash['Modified']}")
+          print_line("Accessed      : #{hash['Accessed']}")
+          print_line("Created       : #{hash['Created']}")
+          print_line("Entry Modified: #{hash['Entry Modified']}")
+        when "-h"
+          print_line("\nUsage: timestomp file_path OPTIONS\n" +
+            @@timestomp_opts.usage)
+          return
+      end
+    }
+
+    # If any one of the four times were specified, change them.
+    if (modified or accessed or creation or emodified)
+      print_status("Setting specific MACE attributes on #{file_path}")
+      client.priv.fs.set_file_mace(file_path, modified, accessed,
+        creation, emodified)
+    end
+  end
 
 protected
 
-	#
-	# Converts a date/time in the form of MM/DD/YYYY HH24:MI:SS
-	#
-	def str_to_time(str) # :nodoc:
-		r, mon, day, year, hour, min, sec = str.match("^(\\d+?)/(\\d+?)/(\\d+?) (\\d+?):(\\d+?):(\\d+?)$").to_a
+  #
+  # Converts a date/time in the form of MM/DD/YYYY HH24:MI:SS
+  #
+  def str_to_time(str) # :nodoc:
+    r, mon, day, year, hour, min, sec = str.match("^(\\d+?)/(\\d+?)/(\\d+?) (\\d+?):(\\d+?):(\\d+?)$").to_a
 
-		if (mon == nil)
-			raise ArgumentError, "Invalid date format, expected MM/DD/YYYY HH24:MI:SS (got #{str})"
-		end
+    if (mon == nil)
+      raise ArgumentError, "Invalid date format, expected MM/DD/YYYY HH24:MI:SS (got #{str})"
+    end
 
-		Time.mktime(year, mon, day, hour, min, sec, 0)
-	end
+    Time.mktime(year, mon, day, hour, min, sec, 0)
+  end
 
 end