metasploit-framework/modules/auxiliary/scanner/http/scraper.rb

90 lines
2.2 KiB
Ruby

##
# This module requires Metasploit: https://metasploit.com/download
# Current source: https://github.com/rapid7/metasploit-framework
##
class MetasploitModule < Msf::Auxiliary
# Exploit mixins should be called first
include Msf::Exploit::Remote::HttpClient
include Msf::Auxiliary::WmapScanServer
# Scanner mixin should be near last
include Msf::Auxiliary::Scanner
include Msf::Auxiliary::Report
def initialize
super(
'Name' => 'HTTP Page Scraper',
'Description' => 'Scrape defined data from a specific web page based on a regular expression',
'Author' => ['et'],
'License' => MSF_LICENSE
)
register_options(
[
OptString.new('PATH', [ true, "The test path to the page to analize", '/']),
OptRegexp.new('PATTERN', [ true, "The regex to use (default regex is a sample to grab page title)", '<title>(.*)</title>'])
])
end
def run_host(target_host)
tpath = normalize_uri(datastore['PATH'])
if tpath[-1,1] != '/'
tpath += '/'
end
begin
res = send_request_raw({
'uri' => tpath,
'method' => 'GET',
'version' => '1.0',
}, 10)
if not res
print_error("[#{target_host}] #{tpath} - No response")
return
end
result = res.body.scan(datastore['PATTERN']).flatten.map{ |s| s.strip }.uniq
result.each do |u|
print_good("[#{target_host}] #{tpath} [#{u}]")
report_note(
:host => target_host,
:port => rport,
:proto => 'tcp',
:type => "http.scraper.#{rport}",
:data => u
)
report_web_vuln(
:host => target_host,
:port => rport,
:vhost => vhost,
:ssl => ssl,
:path => tpath,
:method => 'GET',
:pname => "",
:proof => u,
:risk => 0,
:confidence => 100,
:category => 'scraper',
:description => 'Scraper',
:name => 'scraper'
)
end
rescue ::Rex::ConnectionRefused, ::Rex::HostUnreachable, ::Rex::ConnectionTimeout
rescue ::Timeout::Error, ::Errno::EPIPE
end
end
end