From fe975d196fb560822cd9d6b38a18c11bcbfe0c47 Mon Sep 17 00:00:00 2001 From: David Rude Date: Thu, 11 Aug 2011 23:45:43 +0000 Subject: [PATCH] add Web PII VSploit module git-svn-id: file:///home/svn/framework3/trunk@13538 4d416f70-5f16-0410-b530-b9f4589650da --- modules/auxiliary/vsploit/pii/web_pii.rb | 94 ++++++++++++++++++++++++ 1 file changed, 94 insertions(+) create mode 100644 modules/auxiliary/vsploit/pii/web_pii.rb diff --git a/modules/auxiliary/vsploit/pii/web_pii.rb b/modules/auxiliary/vsploit/pii/web_pii.rb new file mode 100644 index 0000000000..0296ea326d --- /dev/null +++ b/modules/auxiliary/vsploit/pii/web_pii.rb @@ -0,0 +1,94 @@ +## +# This file is part of the Metasploit Framework and may be subject to +# redistribution and commercial restrictions. Please see the Metasploit +# Framework web site for more information on licensing and terms of use. +# http://metasploit.com/framework/ +## + +require 'msf/core' + +class Metasploit3 < Msf::Auxiliary + + # + # This module acts as an compromised webserver distributing PII Data + # + include Msf::Exploit::Remote::HttpServer::HTML + #p "Loading vSploit PII Webserver" + include Msf::Auxiliary::PII + + def initialize(info = {}) + super(update_info(info, + 'Name' => 'vSploit Web PII', + 'Description' => 'This module emulates a webserver leaking PII data', + 'License' => MSF_LICENSE, + 'Author' => 'MJC', + 'Version' => '$Revision$', + 'References' => + [ + [ 'URL', 'http://www.metasploit.com'], + ], + 'DefaultOptions' => { 'HTTP::server_name' => 'IIS'} + )) + register_options( + [ + OptBool.new('META_REFRESH', [ false, "Set page to auto refresh.", false]), + OptInt.new('REFRESH_TIME', [ false, "Set page refresh interval.", 15]), + OptInt.new('ENTRIES', [ false, "PII Entry Count", 1000]) + ],self.class) + end + + + def create_page + # Webpage Title + title = "vSploit PII Webserver" + sheep = +" + __________ +< baaaaah! > + --------- + \\ + \\ + ,@;@, + ;@;@( \\@;@;@;@;@;@, + /x @\\_|@;@;@;@;@;@;, + / )@:@;@;@;@;@;@;@|) + *---;@;@;@;@;@;@;@;@; + ';@;\;@;\;@;@ + || | \\ ( + || | // / + // ( // / + ~~~~~ ~~~~ + +" + page = "" + page << "\n\n" + + if datastore['META_REFRESH'] + page << "\n" + end + + page << "#{title}\n\n\n" + page << "
\n"
+		page << sheep
+		page << "Data Creation by: #{title}\n"
+		page << "Entries Per Page: #{datastore['ENTRIES']}\n"
+
+		if datastore['META_REFRESH']
+			page << "Refresh Interval: #{datastore['REFRESH_TIME']} Seconds\n"
+		end
+
+		# Start creating PII data
+		pii = create_pii()
+		page << "\n"
+		page << pii
+		page << "
\n\n" + page + end + + def on_request_uri(cli,request) + # Transmit the response to the client + res = create_page() + print_status("Leaking PII to #{cli.peerhost}:#{cli.peerport}") + send_response(cli, res, { 'Content-Type' => 'text/html' }) + end +end