add Web PII VSploit module

git-svn-id: file:///home/svn/framework3/trunk@13538 4d416f70-5f16-0410-b530-b9f4589650da
rapid7 · Aug 11, 2011 · fe975d1 · fe975d1
1 parent f971a84
commit fe975d1
Showing 1 changed file with 94 additions and 0 deletions.
diff --git a/modules/auxiliary/vsploit/pii/web_pii.rb b/modules/auxiliary/vsploit/pii/web_pii.rb
@@ -0,0 +1,94 @@
+##
+# This file is part of the Metasploit Framework and may be subject to
+# redistribution and commercial restrictions. Please see the Metasploit
+# Framework web site for more information on licensing and terms of use.
+# http://metasploit.com/framework/
+##
+
+require 'msf/core'
+
+class Metasploit3 < Msf::Auxiliary
+
+	#
+	# This module acts as an compromised webserver distributing PII Data
+	#
+	include Msf::Exploit::Remote::HttpServer::HTML
+	#p "Loading vSploit PII Webserver"
+	include Msf::Auxiliary::PII
+
+	def initialize(info = {})
+		super(update_info(info,
+			'Name'           => 'vSploit Web PII',
+			'Description'    => 'This module emulates a webserver leaking PII data',
+			'License'        => MSF_LICENSE,
+			'Author'         => 'MJC',
+			'Version'        => '$Revision$',
+			'References' =>
+			[
+				[ 'URL', 'http://www.metasploit.com'],
+			],
+			'DefaultOptions' => { 'HTTP::server_name' => 'IIS'}
+			))
+		register_options(
+				[
+					OptBool.new('META_REFRESH', [ false, "Set page to auto refresh.", false]),
+					OptInt.new('REFRESH_TIME', [ false, "Set page refresh interval.", 15]),
+					OptInt.new('ENTRIES', [ false, "PII Entry Count", 1000])
+				],self.class)
+	end
+
+
+	def create_page
+		# Webpage Title
+		title = "vSploit PII Webserver"
+		sheep = 
+"
+ __________
+< baaaaah! >
+ ---------
+     \\
+      \\
+          ,@;@,
+         ;@;@( \\@;@;@;@;@;@,
+         /x  @\\_|@;@;@;@;@;@;,
+        /    )@:@;@;@;@;@;@;@|)
+        *---;@;@;@;@;@;@;@;@; 
+               ';@;\;@;\;@;@
+                || |   \\ (
+                || |   // /
+                // (  // /
+               ~~~~~ ~~~~ 
+
+"
+		page = ""
+		page << "<html>\n<head>\n"
+
+		if datastore['META_REFRESH']
+			page << "<meta http-equiv=\"refresh\" content=\"#{datastore['REFRESH_TIME']}\">\n"
+		end
+
+		page << "<title>#{title}</title>\n</head>\n<body>\n"
+		page << "<pre>\n"
+		page << sheep
+		page << "Data Creation by: #{title}\n"
+		page << "Entries Per Page: #{datastore['ENTRIES']}\n"
+
+		if datastore['META_REFRESH']
+			page << "Refresh Interval: #{datastore['REFRESH_TIME']} Seconds\n"
+		end
+
+		# Start creating PII data
+		pii = create_pii()
+		page << "\n"
+		page << pii
+		page << "</pre>\n</body>\n</html>"
+		page
+	end
+
+	def on_request_uri(cli,request)
+		# Transmit the response to the client
+		res = create_page()
+		print_status("Leaking PII to #{cli.peerhost}:#{cli.peerport}")
+		send_response(cli, res, { 'Content-Type' => 'text/html' })
+	end
+end