metasploit-framework/lib/msf/core/auxiliary/wmapmodule.rb

# -*- coding: binary -*-
module Msf
###
#
# This module provides methods for WMAP-enabled modules
#
###

module Auxiliary::WmapModule

  attr_accessor :orderid
  attr_accessor :requiredids

  #
  # Initializes an instance of a WMAP module
  #
  def initialize(info = {})
    super
    self.orderid = 0xFFFFFF
    self.requiredids = {}
  end

  def register_wmap_options(options)
    if options.has_key?('OrderID')
      self.orderid = options['OrderID']
    end

    if 	options.has_key?('Require')
      self.requiredids = options['Require']
    end
  end

  def wmap_enabled
    #enabled by default
    true
  end

  def wmap_getoid
    self.orderid
  end

  def wmap_setoid(oid)
    self.orderid = oid
  end

  def wmap_type
    #default type
    nil
  end

  def wmap_target_host
    datastore['RHOST']
  end

  def wmap_target_port
    datastore['RPORT']
  end

  def wmap_target_ssl
    datastore['SSL']
  end

  def wmap_target_vhost
    datastore['VHOST']
  end

  def wmap_base_url
    res = (ssl ? "https://" : "http://")
    if datastore['VHOST'].nil?
      res << wmap_target_host
    else
      res << datastore['VHOST']
    end
    res << ":" + wmap_target_port.to_s
    res
  end


  #
  # Modified from CGI.rb as we dont use arrays
  #
  def headersparse(qheaders)
    params = Hash.new()

    qheaders.split(/[&;]/n).each do |pairs|
      key, value = pairs.split(':',2)
      if params.has_key?(key)
        #Error
      else
        params[key] = value
      end
    end
    params
  end

  #modified from CGI.rb as we dont use arrays
  def queryparse(query)
    params = Hash.new()

    query.split(/[&;]/n).each do |pairs|
      key, value = pairs.split('=',2)
      if params.has_key?(key)
        #Error
      else
        params[key] = value
      end
    end
    params
  end

  # Levenshtein distance algorithm  (slow, huge mem consuption)
  def distance(a, b)
    case
    when a.empty?
      b.length
    when b.empty?
      a.length
    else
      [(a[0] == b[0] ? 0 : 1) + distance(a[1..-1], b[1..-1]),
      1 + distance(a[1..-1], b),
      2 + distance(a, b[1..-1])].min
    end
  end

end

###
#
# This module provides methods for WMAP SSL Scanner modules
#
###

module Auxiliary::WmapScanSSL
  include Auxiliary::WmapModule

  def wmap_type
    :wmap_ssl
  end
end

###
#
# This module provides methods for WMAP File Scanner modules
#
###

module Auxiliary::WmapScanFile
  include Auxiliary::WmapModule

  def wmap_type
    :wmap_file
  end
end

###
#
# This module provides methods for WMAP Directory Scanner modules
#
###

module Auxiliary::WmapScanDir
  include Auxiliary::WmapModule

  def wmap_type
    :wmap_dir
  end
end

###
#
# This module provides methods for WMAP Web Server Scanner modules
#
###

module Auxiliary::WmapScanServer
  include Auxiliary::WmapModule

  def wmap_type
    :wmap_server
  end
end

###
#
# This module provides methods for WMAP Query Scanner modules
#
###

module Auxiliary::WmapScanQuery
  include Auxiliary::WmapModule

  def wmap_type
    :wmap_query
  end
end

###
#
# This module provides methods for WMAP Unique Query Scanner modules
#
###

module Auxiliary::WmapScanUniqueQuery
  include Auxiliary::WmapModule

  def wmap_type
    :wmap_unique_query
  end

  def signature(fpath,fquery)
    hsig = Hash.new()

    hsig = queryparse(fquery)

    #
    # Signature of the form ',p1,p2,pn' then to be appended to path: path,p1,p2,pn
    #

    sigstr = fpath + "," + hsig.map{|p| p[0].to_s}.join(",")
  end
end


module Auxiliary::WmapScanGeneric
  include Auxiliary::WmapModule

  def wmap_type
    :wmap_generic
  end
end

###
#
# This module provides methods for WMAP Crawler modules
#
###

module Auxiliary::WmapCrawler
  include Auxiliary::WmapModule

  def wmap_type
    :wmap_crawler
  end
end

end