metasploit-framework/lib/msf/core/rpc/client.rb

require "xmlrpc/client"
require "rex"

module Msf
module RPC

# Loosely based on the XMLRPC::ClientS class
# Reimplemented for Metasploit

class Client < ::XMLRPC::Client

	attr_accessor :sock, :token

	# Use a TCP socket to do RPC
	def initialize(info={})

		@buff = ""
		self.sock = Rex::Socket::Tcp.create(
			'PeerHost' => info[:host],
			'PeerPort' => info[:port],
			'SSL'      => info[:ssl]
		)
	end

	# This override hooks into the RPCXML library
	def do_rpc(request,async)
		self.sock.put(request + "\x00")

		while(not @buff.index("\x00"))
			resp = self.sock.get
			if ( (!resp or resp == "") and @buff.index("\x00").nil?)
				raise RuntimeError, "XMLRPC connection closed: #{resp.inspect}"
			end

			@buff << resp if resp
		end

		mesg,left = @buff.split("\x00", 2)
		@buff = left.to_s
		mesg
	end

	def login(user,pass)
		res = self.call("auth.login", user, pass)
		if(not (res and res['result'] == "success"))
			raise RuntimeError, "authentication failed"
		end
		self.token = res['token']
		true
	end

	# Prepend the authentication token as the first parameter
	# of every call except auth.login. Requires the
	def call(meth, *args)
		if(meth != "auth.login")
			if(not self.token)
				raise RuntimeError, "client not authenticated"
			end
			args.unshift(self.token)
		end
		super(meth, *args)
	end

end
end
end