metasploit-runner 0.0.8 → 0.0.9

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 3aa74a612b220bdf4518066c980c75bc676a768a
-  data.tar.gz: aa3574a74021210c57a9510cb082ae07924e8133
+  metadata.gz: 3b62c85eea93ad0811660c4edfd7f47710e2db90
+  data.tar.gz: a6f0854d43fea53c523c7d95693a1d876044dd22
 SHA512:
-  metadata.gz: c242eb34af6da8d8dd0e773230eb4d660567286f65f5435748ac025124fa0951b7dc3e47d427c2a124800aa61eeb2afd56a346a065536b1bbc5829fa7be4815f
-  data.tar.gz: 61f2ae1bc235e8eacd839a1b11a4f7c6614a6776e777bf827487d7ffd2cb2cc34a5d7ed81c5dced766202930a67cfbbeae0bdf65f98fa707e16469ddf5cbcf9c
+  metadata.gz: e0988fef0a4b916632bc895d131b7cfbb36495d38241553febfd5c0b66e70a891c510995b61f0923e07bf0568845ca34822db6dfb174938aefecf7f411bd9db1
+  data.tar.gz: 273ccd1acb8882347c8ab4ec70d23d7a57cebba93b148861b3fd40681c8f58fe550dc9660585536a8b2efa845bc6565b931e96e63f2a220163b83c1b84bb4191

data/README.md

@@ -39,12 +39,19 @@ Example WITHOUT Nexpose Console Integration:
 
     $ exploit "sploit.mydomain.com" "3790" "/api/1.0" "true" "asdlkjhsdfuw1228340asdasf8" "mycoolsoftware-build-28" "" "10.0.0.1"
 
+Additionally, a module filter may be passed in to determine which modules are whitelisted to run during an exploit.  The module filter parameter is a comma separate value
+for specifying multiple paths.
+
+Example WITH Module Filter:
+
+    $ exploit "sploit.mydomain.com" "3790" "/api/1.0" "true" "asdlkjhsdfuw1228340asdasf8" "mycoolsoftware-build-28" "nexpose-console-1" "10.0.0.1" "exploit/linux,exploit/multi"
 
 The if you do not pass the following options they will default to the respective values:
 
        port -> 3790
        uri -> /api/1.0
        use_ssl -> true
+       module_filter -> nil
 
 Example using the defaults:
 

data/lib/MetasploitPenTestScript/version.rb

@@ -1,3 +1,3 @@
 module MetasploitPenTestScript
-  VERSION = "0.0.8"
+  VERSION = "0.0.9"
 end

data/lib/metasploit/exploit.rb

@@ -4,7 +4,7 @@ require 'metasploit/exploit_run_description'
 
 module Metasploit
   module Exploit
-    def Exploit.start(connection_url, port, uri, use_ssl, token, workspace_name, nexpose_console_name, device_ip_to_scan)
+    def Exploit.start(connection_url, port, uri, use_ssl, token, workspace_name, nexpose_console_name, device_ip_to_scan, module_filter=nil)
       run_details = ExploitRunDescription.new connection_url, port, uri, use_ssl, token, workspace_name, nexpose_console_name, device_ip_to_scan
       run_details.verify
 
@@ -18,7 +18,7 @@ module Metasploit
 
       do_metasploit_audit(rpc_client, run_details)
 
-      do_metasploit_exploit(rpc_client, run_details)
+      do_metasploit_exploit(rpc_client, run_details, module_filter)
     end
 
     private
@@ -61,8 +61,14 @@ module Metasploit
       wait_for_task_to_stop_running(rpc_client, CONSTANTS::AUDIT_MESSAGE, audit['task_id'])
     end
 
-    def self.do_metasploit_exploit(rpc_client, run_details)
-      sploit = rpc_client.call('pro.start_exploit', {'workspace' => run_details.workspace_name})
+    def self.do_metasploit_exploit(rpc_client, run_details, module_filter)
+      options = {
+        'workspace' => run_details.workspace_name
+      }
+      if !module_filter.nil?
+         options['DS_ModuleFilter'] = module_filter 
+      end
+      sploit = rpc_client.call('pro.start_exploit', options)
       wait_for_task_to_stop_running(rpc_client, CONSTANTS::EXPLOIT_MESSAGE, sploit['task_id'])
     end
 

data/spec/exploit_spec.rb

@@ -17,6 +17,7 @@ describe 'exploit' do
       @expected_webscan_task_id = '12'
       @expected_import_task_id = '1'
       @expected_exploit_task_id = '13'
+      @expected_exploit_module_filter = 'exploit/linux,exploit/multi'
       @expected_audit_task_id = '14'
       @expected_audit_max_requests = 1000
       @expected_audit_max_minutes = 3
@@ -293,6 +294,13 @@ describe 'exploit' do
         Metasploit::Exploit.start(@expected_connection, @expected_port, @expected_uri, @expected_ssl,  @expected_token, @expected_workspace_name, @expected_nexpose_console_name, @mock_device_ip_to_scan)
       end
 
+      it 'should use a module filter if one is specified' do
+        expect(@mock_rpc_client).to receive(:call)
+                                    .with('pro.start_exploit', {'workspace' => @expected_workspace_name, 'DS_ModuleFilter' => @expected_exploit_module_filter})
+
+        Metasploit::Exploit.start(@expected_connection, @expected_port, @expected_uri, @expected_ssl,  @expected_token, @expected_workspace_name, @expected_nexpose_console_name, @mock_device_ip_to_scan, @expected_exploit_module_filter)
+      end
+
       describe 'wait for exploit to be over' do
         before(:each) do
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: metasploit-runner
 version: !ruby/object:Gem::Version
-  version: 0.0.8
+  version: 0.0.9
 platform: ruby
 authors:
 - Nathan Gibson