infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Class constants and Regex added

bug/bundler_fix
bmerinofe 2013-12-31 03:20:12 +01:00
parent e3d918a8a3
commit 832b0455f1
1 changed files with 26 additions and 40 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

66
modules/post/windows/manage/driver_loader.rb
View File

@ -9,6 +9,28 @@ class Metasploit3 < Msf::Post
include Msf::Post::Windows::Priv
include Msf::Post::Windows::Services
START_TYPE = {
"demand" => "SERVICE_DEMAND_START",
"boot" => "SERVICE_BOOT_START",
"auto" => "SERVICE_AUTO_START",
"disabled" => "SERVICE_DISABLED",
"system" => "SERVICE_SYSTEM_START"
}
ERROR_TYPE = {
"critical" => "SERVICE_ERROR_CRITICAL",
"normal" => "SERVICE_ERROR_NORMAL",
"severe" => "SERVICE_ERROR_SEVERE",
"ignore" => "SERVICE_ERROR_IGNORE"
}
SERVICE_TYPE = {
"kernel" => "SERVICE_KERNEL_DRIVER",
"file_system" => "SERVICE_FILE_SYSTEM_DRIVER",
"adapter" => "SERVICE_ADAPTER",
"recognizer" => "SERVICE_RECOGNIZER_DRIVER"
}
def initialize(info={})
super( update_info( info,
'Name' => 'Windows Manage Driver Loader',
@ -44,9 +66,7 @@ class Metasploit3 < Msf::Post
return
end
system_root = driver.split('\\')[0..1].join('\\').upcase
unless system_root == expand_path("%SYSTEMROOT%")
unless driver =~ /#{Regexp.escape(expand_path("%SYSTEMROOT%"))}/i
print_error("The driver must be inside %SYSTEMROOT%.")
return
end
@ -75,9 +95,9 @@ class Metasploit3 < Msf::Post
def install_driver(opts={})
service_all_access = 0xF01FF
service_type = get_service(opts[:service])
service_error_type = get_error(opts[:error])
service_start_type = get_start(opts[:start])
service_type = SERVICE_TYPE[opts[:service]]
service_error_type = ERROR_TYPE[opts[:error]]
service_start_type = START_TYPE[opts[:start]]
advapi32 = client.railgun.advapi32
name = opts[:name]
# Default access: sc_manager_all_access (0xF003F)
@ -100,38 +120,4 @@ class Metasploit3 < Msf::Post
end
return false
end
def get_start(type)
start_type = {
"demand" => "SERVICE_DEMAND_START",
"boot" => "SERVICE_BOOT_START",
"auto" => "SERVICE_AUTO_START",
"disabled" => "SERVICE_DISABLED",
"system" => "SERVICE_SYSTEM_START"
}
return start_type[type]
end
def get_error(type)
error_type = {
"critical" => "SERVICE_ERROR_CRITICAL",
"normal" => "SERVICE_ERROR_NORMAL",
"severe" => "SERVICE_ERROR_SEVERE",
"ignore" => "SERVICE_ERROR_IGNORE"
}
return error_type[type]
end
def get_service(type)
service_type = {
"kernel" => "SERVICE_KERNEL_DRIVER",
"file_system" => "SERVICE_FILE_SYSTEM_DRIVER",
"adapter" => "SERVICE_ADAPTER",
"recognizer" => "SERVICE_RECOGNIZER_DRIVER"
}
return service_type[type]
end
end