vlad902
126c71d25a
git-svn-id: file:///home/svn/incoming/trunk@3421 4d416f70-5f16-0410-b530-b9f4589650da
65 lines
1.2 KiB
Ruby
65 lines
1.2 KiB
Ruby
require 'rex/proto/sunrpc'
|
|
|
|
module Msf
|
|
|
|
###
|
|
#
|
|
# This mixin provides utility methods for interacting with a SunRPC service on
|
|
# a remote machine. These methods may generally be useful in the context of
|
|
# exploitation. This mixin extends the Tcp exploit mixin. Only one SunRPC
|
|
# service can be accessed at a time using this class.
|
|
#
|
|
###
|
|
module Exploit::Remote::SunRPC
|
|
include Exploit::Remote::Tcp
|
|
|
|
def initialize(info = {})
|
|
super
|
|
|
|
register_advanced_options(
|
|
[
|
|
# XXX: Frags...
|
|
# XXX: Use portmapper to do call
|
|
], Msf::Exploit::Remote::SunRPC)
|
|
|
|
register_options(
|
|
[
|
|
# XXX: XPORT
|
|
Opt::RHOST,
|
|
Opt::RPORT(111),
|
|
], Msf::Exploit::Remote::SunRPC
|
|
)
|
|
end
|
|
|
|
def sunrpc_create(protocol, program, version)
|
|
self.rpcobj = Rex::Proto::SunRPC::Client.new(datastore['RHOST'], datastore['RPORT'], protocol, program, version)
|
|
# if datastore['XPORT']
|
|
# rpcobj.pport = datastore['XPORT']
|
|
# else
|
|
rpcobj.create
|
|
# end
|
|
end
|
|
|
|
def sunrpc_call(proc, buf)
|
|
rpcobj.call(proc, buf)
|
|
end
|
|
|
|
def sunrpc_destroy
|
|
rpcobj.destroy
|
|
rpcobj = nil
|
|
end
|
|
|
|
def sunrpc_authnull(*args)
|
|
rpcobj.authnull_create(*args)
|
|
end
|
|
|
|
def sunrpc_authunix(*args)
|
|
rpcobj.authunix_create(*args)
|
|
end
|
|
|
|
# Used to track the last SunRPC context
|
|
attr_accessor :rpcobj
|
|
end
|
|
|
|
end
|