126 lines
2.8 KiB
Ruby
126 lines
2.8 KiB
Ruby
require 'rex'
|
|
require 'rex/ui/text/output/buffer'
|
|
|
|
module Msf
|
|
module RPC
|
|
class Session < Base
|
|
|
|
def list(token)
|
|
authenticate(token)
|
|
res = {}
|
|
@framework.sessions.each do |sess|
|
|
i,s = sess
|
|
res[s.sid] = {
|
|
'type' => s.type.to_s,
|
|
'tunnel_local'=> s.tunnel_local.to_s,
|
|
'tunnel_peer' => s.tunnel_peer.to_s,
|
|
'via_exploit' => s.via_exploit.to_s,
|
|
'via_payload' => s.via_payload.to_s,
|
|
'desc' => s.desc.to_s,
|
|
'info' => s.info.to_s,
|
|
'workspace' => s.workspace.to_s,
|
|
'target_host' => s.target_host.to_s
|
|
}
|
|
end
|
|
res
|
|
end
|
|
|
|
def stop(token, sid)
|
|
authenticate(token)
|
|
s = _find_session(sid)
|
|
s.kill
|
|
{ "result" => "success" }
|
|
end
|
|
|
|
def shell_read(token, sid)
|
|
authenticate(token)
|
|
s = _find_session(sid)
|
|
if(s.type != "shell")
|
|
raise ::XMLRPC::FaultException.new(403, "session is not a shell")
|
|
end
|
|
|
|
if(not s.rstream.has_read_data?(0))
|
|
{ "data" => "", "encoding" => "base64" }
|
|
else
|
|
data = s.shell_read
|
|
{ "data" => Rex::Text.encode_base64(data), "encoding" => "base64" }
|
|
end
|
|
end
|
|
|
|
def shell_write(token, sid, data)
|
|
authenticate(token)
|
|
s = _find_session(sid)
|
|
if(s.type != "shell")
|
|
raise ::XMLRPC::FaultException.new(403, "session is not a shell")
|
|
end
|
|
buff = Rex::Text.decode_base64(data)
|
|
|
|
{ "write_count" => s.shell_write(buff) }
|
|
end
|
|
|
|
def meterpreter_read(token, sid)
|
|
authenticate(token)
|
|
s = _find_session(sid)
|
|
if(s.type != "meterpreter")
|
|
raise ::XMLRPC::FaultException.new(403, "session is not meterpreter")
|
|
end
|
|
|
|
if not s.user_output.respond_to? :dump_buffer
|
|
s.init_ui(nil, Rex::Ui::Text::Output::Buffer.new)
|
|
end
|
|
|
|
data = s.user_output.dump_buffer
|
|
# XXX Ghetto
|
|
#
|
|
# This should really be handled on the sessions' input/output handles
|
|
# but this gets it working for right now.
|
|
#
|
|
if data.length > 0
|
|
@framework.events.on_session_output(s, data)
|
|
end
|
|
{ "data" => Rex::Text.encode_base64(data), "encoding" => "base64" }
|
|
end
|
|
|
|
#
|
|
# Run a single meterpreter console command
|
|
#
|
|
def meterpreter_write(token, sid, data)
|
|
authenticate(token)
|
|
s = _find_session(sid)
|
|
if(s.type != "meterpreter")
|
|
raise ::XMLRPC::FaultException.new(403, "session is not meterpreter")
|
|
end
|
|
|
|
if not s.user_output.respond_to? :dump_buffer
|
|
s.init_ui(nil, Rex::Ui::Text::Output::Buffer.new)
|
|
end
|
|
|
|
buff = Rex::Text.decode_base64(data)
|
|
# This is already covered by the meterpreter console's on_command_proc
|
|
# so don't do it here
|
|
#@framework.events.on_session_command(s, buff)
|
|
|
|
Thread.new { s.console.run_single(buff) }
|
|
|
|
{}
|
|
end
|
|
|
|
def meterpreter_script(token, sid, data)
|
|
meterpreter_write(token, sid, "run #{data}")
|
|
end
|
|
|
|
protected
|
|
|
|
def _find_session(sid)
|
|
s = @framework.sessions[sid.to_i]
|
|
if(not s)
|
|
raise ::XMLRPC::FaultException.new(404, "unknown session")
|
|
end
|
|
s
|
|
end
|
|
|
|
end
|
|
end
|
|
end
|
|
|