結果保存ヘルパー

成果物を DB や loot に残すヘルパーの使用例です。API 一覧は Report mixin を参照してください。

store_loot

path = store_loot(
  'app.config',
  'application/json',
  rhost,
  res.body,
  'config.json',
  'ExampleApp config dump'
)
print_good("Stored #{path}")

post では host の代わりに session を渡せます。

store_loot('host.passwd', 'text/plain', session, data, 'passwd')

report_service / report_note / report_vuln

report_service(host: rhost, port: 22, proto: 'tcp', name: 'ssh', info: banner)

report_note(
  host: rhost,
  type: 'example.users',
  data: { users: users },
  update: :unique_data
)

report_vuln(
  host: rhost,
  port: rport,
  name: name,
  refs: references,
  info: 'authenticated RCE'
)

資格情報

create_credential_and_login(
  workspace_id: myworkspace_id,
  origin_type: :service,
  module_fullname: fullname,
  address: rhost,
  port: rport,
  protocol: 'tcp',
  service_name: 'http',
  username: datastore['USERNAME'],
  private_data: datastore['PASSWORD'],
  private_type: :password,
  status: Metasploit::Model::Login::Status::SUCCESSFUL
)

invalidate_login(
  address: rhost,
  port: rport,
  protocol: 'tcp',
  public: user,
  private: pass,
  realm_key: nil,
  status: Metasploit::Model::Login::Status::INCORRECT
)

実行時の確認

hosts
services
creds
vulns
loot