Module: Msf::Payload::Adapter::Fetch::Server::HTTP

Included in:
HTTP, Https
Defined in:
lib/msf/core/payload/adapter/fetch/server/http.rb

Instance Method Summary collapse

Instance Method Details

#add_resource(fetch_service, uri, srvexe) ⇒ Object 



22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
 
# File 'lib/msf/core/payload/adapter/fetch/server/http.rb', line 22

def add_resource(fetch_service, uri, srvexe)
  vprint_status("Adding resource #{uri}")
  begin
    if fetch_service.resources.include?(uri)
      # When we clean up, we need to leave resources alone, because we never added one.
      fail_with(Msf::Exploit::Failure::BadConfig, "Resource collision detected. Set FETCH_URIPATH to a different value to continue.")
    end
    fetch_service.add_resource(uri,
                               'Proc' => proc do |cli, req|
                                 on_request_uri(cli, req, srvexe)
                               end,
                               'VirtualDirectory' => true)
  rescue  ::Exception => e
    # When we clean up, we need to leave resources alone, because we never added one.
    fail_with(Msf::Exploit::Failure::Unknown, "Failed to add resource\n#{e}")
  end
  @myresources << uri
end

#cleanup_http_fetch_service(fetch_service, my_resources) ⇒ Object 



41
42
43
44
45
46
47
48
49
50
 
# File 'lib/msf/core/payload/adapter/fetch/server/http.rb', line 41

def cleanup_http_fetch_service(fetch_service, my_resources)
  my_resources.each do |uri|
    if fetch_service.resources.include?(uri)
      fetch_service.remove_resource(uri)
    end

  end

  fetch_service.deref
end

#fetch_protocol ⇒ Object 



14
15
16
 
# File 'lib/msf/core/payload/adapter/fetch/server/http.rb', line 14

def fetch_protocol
  'HTTP'
end

#initialize(*args) ⇒ Object

This mixin supports only HTTP fetch handlers.



5
6
7
8
9
10
11
12
 
# File 'lib/msf/core/payload/adapter/fetch/server/http.rb', line 5

def initialize(*args)
  super
  register_advanced_options(
    [
      Msf::OptString.new('FetchHttpServerName', [true, 'Fetch HTTP server name', 'Apache'])
    ]
  )
end

#on_request_uri(cli, request, srvexe) ⇒ Object 



65
66
67
68
69
70
71
72
73
 
# File 'lib/msf/core/payload/adapter/fetch/server/http.rb', line 65

def on_request_uri(cli, request, srvexe)
  client = cli.peerhost
  vprint_status("Client #{client} requested #{request.uri}")
  if (user_agent = request.headers['User-Agent'])
    client += " (#{user_agent})"
  end
  vprint_status("Sending payload to #{client}")
  cli.send_response(payload_response(srvexe))
end

#payload_response(srvexe) ⇒ Object 



75
76
77
78
79
80
 
# File 'lib/msf/core/payload/adapter/fetch/server/http.rb', line 75

def payload_response(srvexe)
  res = Rex::Proto::Http::Response.new(200, 'OK', Rex::Proto::Http::DefaultProtocol)
  res['Content-Type'] = 'text/html'
  res.body = srvexe.to_s.unpack('C*').pack('C*')
  res
end

#srvname ⇒ Object 



18
19
20
 
# File 'lib/msf/core/payload/adapter/fetch/server/http.rb', line 18

def srvname
  datastore['FetchHttpServerName']
end

#start_http_fetch_handler(srvname, ssl = false, ssl_cert = nil, ssl_compression = nil, ssl_cipher = nil, ssl_version = nil) ⇒ Object 



52
53
54
55
56
57
58
59
60
61
62
63
 
# File 'lib/msf/core/payload/adapter/fetch/server/http.rb', line 52

def start_http_fetch_handler(srvname, ssl=false, ssl_cert=nil, ssl_compression=nil, ssl_cipher=nil, ssl_version=nil)
  # this looks a bit funny because I converted it to use an instance variable so that if we crash in the
  # middle and don't return a value, we still have the right fetch_service to clean up.
  fetch_service = start_http_server(ssl, ssl_cert, ssl_compression, ssl_cipher, ssl_version)
  if fetch_service.nil?
    cleanup_handler
    fail_with(Msf::Exploit::Failure::BadConfig, "Fetch handler failed to start on #{fetch_bindnetloc}")
  end
  vprint_status("#{fetch_protocol} server started")
  fetch_service.server_name = srvname
  fetch_service
end

#start_http_server(ssl = false, ssl_cert = nil, ssl_compression = nil, ssl_cipher = nil, ssl_version = nil) ⇒ Object 



82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
 
# File 'lib/msf/core/payload/adapter/fetch/server/http.rb', line 82

def start_http_server(ssl=false, ssl_cert=nil, ssl_compression=nil, ssl_cipher=nil, ssl_version=nil)
  begin
    fetch_service = Rex::ServiceManager.start(
      Rex::Proto::Http::Server,
      fetch_bindport, fetch_bindhost, ssl,
      {
        'Msf' => framework,
        'MsfExploit' => self
      },
      _determine_server_comm(fetch_bindhost),
      ssl_cert,
      ssl_compression,
      ssl_cipher,
      ssl_version
    )
  rescue Exception => e
    cleanup_handler
    fail_with(Msf::Exploit::Failure::BadConfig, "Fetch handler failed to start on #{fetch_bindnetloc}\n#{e}")
  end
  vprint_status("Fetch handler listening on #{fetch_bindnetloc}")
  fetch_service
end