metasploit-framework/lib/msf/core/rpc/session.rb

137 lines
3.1 KiB
Ruby

require 'rex'
require 'rex/ui/text/output/buffer'
module Msf
module RPC
class Session < Base
def list(token)
authenticate(token)
res = {}
@framework.sessions.each do |sess|
i,s = sess
res[s.sid] = {
'type' => s.type.to_s,
'tunnel_local'=> s.tunnel_local.to_s,
'tunnel_peer' => s.tunnel_peer.to_s,
'via_exploit' => s.via_exploit.to_s,
'via_payload' => s.via_payload.to_s,
'desc' => s.desc.to_s,
'info' => s.info.to_s,
'workspace' => s.workspace.to_s,
'target_host' => s.target_host.to_s,
'username' => s.username.to_s,
'uuid' => s.uuid.to_s,
'exploit_uuid' => s.exploit_uuid.to_s
}
end
res
end
def stop(token, sid)
authenticate(token)
s = _find_session(sid)
s.kill
{ "result" => "success" }
end
def shell_read(token, sid)
authenticate(token)
s = _find_session(sid)
if(s.type != "shell")
raise ::XMLRPC::FaultException.new(403, "session is not a shell")
end
begin
if(not s.rstream.has_read_data?(0))
{ "data" => "", "encoding" => "base64" }
else
data = s.shell_read
{ "data" => Rex::Text.encode_base64(data), "encoding" => "base64" }
end
rescue ::Exception => e
raise ::XMLRPC::FaultException.new(500, "session disconnected: #{e.class} #{e}")
end
end
def shell_write(token, sid, data)
authenticate(token)
s = _find_session(sid)
if(s.type != "shell")
raise ::XMLRPC::FaultException.new(403, "session is not a shell")
end
buff = Rex::Text.decode_base64(data)
begin
{ "write_count" => s.shell_write(buff) }
rescue ::Exception => e
raise ::XMLRPC::FaultException.new(500, "session disconnected: #{e.class} #{e}")
end
end
def meterpreter_read(token, sid)
authenticate(token)
s = _find_session(sid)
if(s.type != "meterpreter")
raise ::XMLRPC::FaultException.new(403, "session is not meterpreter")
end
if not s.user_output.respond_to? :dump_buffer
s.init_ui(nil, Rex::Ui::Text::Output::Buffer.new)
end
data = s.user_output.dump_buffer
# XXX Ghetto
#
# This should really be handled on the sessions' input/output handles
# but this gets it working for right now.
#
if data.length > 0
@framework.events.on_session_output(s, data)
end
{ "data" => Rex::Text.encode_base64(data), "encoding" => "base64" }
end
#
# Run a single meterpreter console command
#
def meterpreter_write(token, sid, data)
authenticate(token)
s = _find_session(sid)
if(s.type != "meterpreter")
raise ::XMLRPC::FaultException.new(403, "session is not meterpreter")
end
if not s.user_output.respond_to? :dump_buffer
s.init_ui(nil, Rex::Ui::Text::Output::Buffer.new)
end
buff = Rex::Text.decode_base64(data)
# This is already covered by the meterpreter console's on_command_proc
# so don't do it here
#@framework.events.on_session_command(s, buff)
Thread.new { s.console.run_single(buff) }
{}
end
def meterpreter_script(token, sid, data)
meterpreter_write(token, sid, ["run #{data}"].pack("m*"))
end
protected
def _find_session(sid)
s = @framework.sessions[sid.to_i]
if(not s)
raise ::XMLRPC::FaultException.new(404, "unknown session")
end
s
end
end
end
end