163 lines
2.8 KiB
Ruby
163 lines
2.8 KiB
Ruby
module Msf
|
|
|
|
###
|
|
#
|
|
# This module provides methods for scanning modules
|
|
#
|
|
###
|
|
|
|
module Auxiliary::Scanner
|
|
|
|
|
|
#
|
|
# Initializes an instance of a recon auxiliary module
|
|
#
|
|
def initialize(info = {})
|
|
super
|
|
|
|
register_options(
|
|
[
|
|
OptAddressRange.new('RHOSTS', [ true, "The target address range or CIDR identifier"]),
|
|
OptInt.new('THREADS', [ true, "The number of concurrent threads", 1 ] )
|
|
], Auxiliary::Scanner)
|
|
|
|
# RHOST should not be used in scanner modules, only RHOSTS
|
|
deregister_options('RHOST')
|
|
end
|
|
|
|
|
|
#
|
|
# The command handler when launched from the console
|
|
#
|
|
def run
|
|
|
|
tl = []
|
|
|
|
begin
|
|
|
|
if (self.respond_to?('run_range'))
|
|
return run_range(datastore['RHOSTS'])
|
|
end
|
|
|
|
if (self.respond_to?('run_host'))
|
|
ar = Rex::Socket::RangeWalker.new(datastore['RHOSTS'])
|
|
|
|
while (true)
|
|
tl = []
|
|
|
|
# Spawn threads for each host
|
|
while (tl.length < datastore['THREADS'])
|
|
ip = ar.next_ip
|
|
break if not ip
|
|
tl << Thread.new do
|
|
targ = ip.dup
|
|
nmod = self.replicant
|
|
nmod.datastore['RHOST'] = targ
|
|
|
|
begin
|
|
nmod.run_host(nmod.rhost)
|
|
rescue ::Interrupt
|
|
raise $!
|
|
rescue ::Rex::ConnectionError
|
|
rescue ::Exception => e
|
|
print_status("Error: #{targ}: #{e} #{e.backtrace}")
|
|
end
|
|
end
|
|
end
|
|
|
|
# Exit once we run out of hosts
|
|
if(tl.length == 0)
|
|
break
|
|
end
|
|
|
|
# Wait for the threads
|
|
tl.each { |t| t.join }
|
|
end
|
|
|
|
return
|
|
end
|
|
|
|
if (self.respond_to?('run_batch'))
|
|
|
|
if (! self.respond_to?('run_batch_size'))
|
|
print_status("This module needs to export run_batch_size()")
|
|
return
|
|
end
|
|
|
|
size = run_batch_size()
|
|
|
|
ar = Rex::Socket::RangeWalker.new(datastore['RHOSTS'])
|
|
|
|
while(true)
|
|
|
|
tl = []
|
|
|
|
nohosts = false
|
|
while (tl.length < datastore['THREADS'])
|
|
|
|
batch = []
|
|
|
|
# Create batches from each set
|
|
while (batch.length < size)
|
|
ip = ar.next_ip
|
|
if (not ip)
|
|
nohosts = true
|
|
break
|
|
end
|
|
batch << ip
|
|
end
|
|
|
|
|
|
# Create a thread for each batch
|
|
if (batch.length > 0)
|
|
tl << Thread.new do
|
|
nmod = self.replicant
|
|
mybatch = batch.dup
|
|
begin
|
|
nmod.run_batch(mybatch)
|
|
rescue ::Interrupt
|
|
raise $!
|
|
rescue ::Rex::ConnectionError
|
|
rescue ::Exception => e
|
|
print_status("Error: #{mybatch[0]}-#{mybatch[-1]}: #{e}")
|
|
end
|
|
end
|
|
end
|
|
|
|
# Exit once we run out of hosts
|
|
if (tl.length == 0 or nohosts)
|
|
break
|
|
end
|
|
end
|
|
|
|
# Wait for the threads
|
|
tl.each { |t| t.join }
|
|
|
|
# Exit if there are no more pending threads
|
|
if (tl.length == 0)
|
|
break
|
|
end
|
|
end
|
|
|
|
return
|
|
end
|
|
|
|
print_status("This module defined no run_host or run_range methods")
|
|
|
|
rescue ::Interrupt
|
|
print_status("Caught interrupt from the console...")
|
|
return
|
|
ensure
|
|
tl.each do |t|
|
|
begin
|
|
t.kill
|
|
rescue ::Exception
|
|
end
|
|
end
|
|
end
|
|
|
|
end
|
|
|
|
end
|
|
end
|