metasploit-gs/plugins/session_tagger.rb

module Msf

###
# 
# This class hooks all session creation events and allows automated interaction
# This is only an example of what you can do with plugins
#
###

class Plugin::SessionTagger < Msf::Plugin


	include Msf::SessionEvent

	def on_session_open(session)
		print_status("Hooked session #{session.sid} / #{session.tunnel_peer}")

		# XXX: Determine what type of session this is before writing to it
		
		if (session.interactive?)
			session.write_shell("MKDIR C:\\TaggedBy#{ENV['USER']}\n")
			session.write_shell("mkdir /tmp/TaggedBy#{ENV['USER']}\n")
		end
		
		#
		# Read output with session.read_shell()
		#
	end

	def on_session_close(session)
		print_status("Hooked session #{session.sid} is shutting down")
	end

	def initialize(framework, opts)
		super
		self.framework.events.add_session_subscriber(self)
	end

	def cleanup
		self.framework.events.remove_session_subscriber(self)
	end

	def name
		"session_tagger"
	end

	def desc
		"Automatically interacts with new sessions"
	end

end
end