2011-08-11 23:45:43 +00:00
|
|
|
##
|
2013-10-15 18:50:46 +00:00
|
|
|
# This module requires Metasploit: http//metasploit.com/download
|
|
|
|
|
# Current source: https://github.com/rapid7/metasploit-framework
|
2011-08-11 23:45:43 +00:00
|
|
|
##
|
|
|
|
|
|
|
|
|
|
require 'msf/core'
|
|
|
|
|
|
|
|
|
|
class Metasploit3 < Msf::Auxiliary
|
2011-11-20 02:12:07 +00:00
|
|
|
|
2013-08-30 21:28:54 +00:00
|
|
|
#
|
|
|
|
|
# This module acts as an compromised webserver distributing PII Data
|
|
|
|
|
#
|
|
|
|
|
include Msf::Exploit::Remote::HttpServer::HTML
|
|
|
|
|
include Msf::Auxiliary::PII
|
2011-11-20 02:12:07 +00:00
|
|
|
|
2013-08-30 21:28:54 +00:00
|
|
|
def initialize(info = {})
|
|
|
|
|
super(update_info(info,
|
|
|
|
|
'Name' => 'VSploit Web PII',
|
|
|
|
|
'Description' => 'This module emulates a webserver leaking PII data',
|
|
|
|
|
'License' => MSF_LICENSE,
|
|
|
|
|
'Author' => 'MJC',
|
|
|
|
|
'References' =>
|
|
|
|
|
[
|
|
|
|
|
[ 'URL', 'https://community.rapid7.com/community/metasploit/blog/2011/06/02/vsploit--virtualizing-exploitation-attributes-with-metasploit-framework']
|
|
|
|
|
],
|
|
|
|
|
'DefaultOptions' => { 'HTTP::server_name' => 'IIS'}
|
|
|
|
|
))
|
|
|
|
|
register_options(
|
|
|
|
|
[
|
|
|
|
|
OptBool.new('META_REFRESH', [ false, "Set page to auto refresh.", false]),
|
|
|
|
|
OptInt.new('REFRESH_TIME', [ false, "Set page refresh interval.", 15]),
|
|
|
|
|
OptInt.new('ENTRIES', [ false, "PII Entry Count", 1000])
|
|
|
|
|
],self.class)
|
|
|
|
|
end
|
2011-08-11 23:45:43 +00:00
|
|
|
|
|
|
|
|
|
2013-08-30 21:28:54 +00:00
|
|
|
def create_page
|
|
|
|
|
# Webpage Title
|
|
|
|
|
title = "vSploit PII Webserver"
|
|
|
|
|
sheep = <<-EOS
|
2011-08-11 23:45:43 +00:00
|
|
|
__________
|
|
|
|
|
< baaaaah! >
|
|
|
|
|
---------
|
|
|
|
|
\\
|
|
|
|
|
\\
|
|
|
|
|
,@;@,
|
|
|
|
|
;@;@( \\@;@;@;@;@;@,
|
|
|
|
|
/x @\\_|@;@;@;@;@;@;,
|
|
|
|
|
/ )@:@;@;@;@;@;@;@|)
|
2011-10-17 02:42:01 +00:00
|
|
|
*---;@;@;@;@;@;@;@;@;
|
2011-08-11 23:45:43 +00:00
|
|
|
';@;\;@;\;@;@
|
|
|
|
|
|| | \\ (
|
|
|
|
|
|| | // /
|
|
|
|
|
// ( // /
|
2011-10-17 02:42:01 +00:00
|
|
|
~~~~~ ~~~~
|
2011-08-11 23:45:43 +00:00
|
|
|
|
2011-10-23 11:56:13 +00:00
|
|
|
EOS
|
2013-08-30 21:28:54 +00:00
|
|
|
page = ""
|
|
|
|
|
page << "<html>\n<head>\n"
|
2011-08-11 23:45:43 +00:00
|
|
|
|
2013-08-30 21:28:54 +00:00
|
|
|
if datastore['META_REFRESH']
|
|
|
|
|
page << "<meta http-equiv=\"refresh\" content=\"#{datastore['REFRESH_TIME']}\">\n"
|
|
|
|
|
end
|
2011-08-11 23:45:43 +00:00
|
|
|
|
2013-08-30 21:28:54 +00:00
|
|
|
page << "<title>#{title}</title>\n</head>\n<body>\n"
|
|
|
|
|
page << "<pre>\n"
|
|
|
|
|
page << sheep
|
|
|
|
|
page << "Data Creation by: #{title}\n"
|
|
|
|
|
page << "Entries Per Page: #{datastore['ENTRIES']}\n"
|
2011-08-11 23:45:43 +00:00
|
|
|
|
2013-08-30 21:28:54 +00:00
|
|
|
if datastore['META_REFRESH']
|
|
|
|
|
page << "Refresh Interval: #{datastore['REFRESH_TIME']} Seconds\n"
|
|
|
|
|
end
|
2011-08-11 23:45:43 +00:00
|
|
|
|
2013-08-30 21:28:54 +00:00
|
|
|
# Start creating PII data
|
|
|
|
|
pii = create_pii()
|
|
|
|
|
page << "\n"
|
|
|
|
|
page << pii
|
|
|
|
|
page << "</pre>\n</body>\n</html>"
|
|
|
|
|
page
|
|
|
|
|
end
|
2011-08-11 23:45:43 +00:00
|
|
|
|
2013-08-30 21:28:54 +00:00
|
|
|
def on_request_uri(cli,request)
|
|
|
|
|
# Transmit the response to the client
|
|
|
|
|
res = create_page()
|
|
|
|
|
print_status("Leaking PII...")
|
|
|
|
|
send_response(cli, res, { 'Content-Type' => 'text/html' })
|
|
|
|
|
end
|
2011-08-12 02:17:07 +00:00
|
|
|
|
2013-08-30 21:28:54 +00:00
|
|
|
def run
|
|
|
|
|
exploit()
|
|
|
|
|
end
|
2011-08-11 23:45:43 +00:00
|
|
|
end
|
