Need an exploit.lua library to unify exploit script interface

[dmiller-nmap]

Possible function: x

Possibly include some things like:

• function to return the value of the most-specific provided script-arg between "exploit.cmd" and "SCRIPT_NAME.cmd".
• function to produce and detect a unique string on various architectures (e.g. PHP, Java, cmd.exe, /bin/sh), useful for confirming code execution.
• lists of known files to check for file inclusion or directory traversal bugs
• common output format like vulns.lua? Or just use vulns.lua.

[cldrn]

Hi Daniel,

What do you mean in number 1? Implementing logic that will select a value if BOTH arguments were set?

[dmiller-nmap]

@cldrn Yes, a way to use --script-args 'exploit.cmd="uname -a", vuln-script-x.cmd="whoami"' and get the right thing.

[h4ck3rk3y]

i had a similar idea regarding directory traversal and lfi scripts earlier. a lot of them have similar code we could use an exploit library. is anyone assigned to this?

[p-l-]

@cldrn that's what is implemented for the ls module proposal (see #106).