Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cleanup pSnuffle #10138

Merged
merged 1 commit into from
Jun 13, 2018
Merged

Cleanup pSnuffle #10138

merged 1 commit into from
Jun 13, 2018

Conversation

bcoles
Copy link
Contributor

@bcoles bcoles commented Jun 4, 2018

Before patch:

msf5 auxiliary(sniffer/psnuffle) > run
[-] Auxiliary failed: Msf::OptionValidateError The following options failed to validate: RHOSTS.

After patch:

msf5 auxiliary(sniffer/psnuffle) > run
[*] Auxiliary module running as background job 1.

[*] Loaded protocol FTP from /pentest/exploit/metasploit-framework/data/exploits/psnuffle/ftp.rb...
[*] Loaded protocol IMAP from /pentest/exploit/metasploit-framework/data/exploits/psnuffle/imap.rb...
[*] Loaded protocol POP3 from /pentest/exploit/metasploit-framework/data/exploits/psnuffle/pop3.rb...
[*] Loaded protocol SMB from /pentest/exploit/metasploit-framework/data/exploits/psnuffle/smb.rb...
[*] Loaded protocol URL from /pentest/exploit/metasploit-framework/data/exploits/psnuffle/url.rb...
[*] Sniffing traffic.....

Cleaned up some code while I was at it. Mostly removing tabs used for indentation, and removing string interpolation where it wasn't required.

@bcoles
Copy link
Contributor Author

bcoles commented Jun 4, 2018

Since the addition of RHOSTS as a replacement for RHOST, the underlying issue could affect many modules which deregister RHOST. I haven't verified.

grep -rn deregister_options modules/auxiliary/ | grep RHOST | wc -l
102

Copy link
Contributor

@wvu wvu left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good. I miss the dsniff days.

@bcoles
Copy link
Contributor Author

bcoles commented Jun 9, 2018

@wvu-r7 BetterCap in sniffing mode (-X --no-spoofing) is my modern goto for this purpose. I wrote a bunch of parsers for BetterCap (when it was written in Ruby). I'll look at porting these over to pSnuffle.

As for whether other modules are affected by this issue, the remainder are probably OK. Outside the scope of this PR - deal with it if/when it becomes an issue.

This PR is ready for merge.

@acammack-r7 acammack-r7 added the rn-no-release-notes no release notes label Jun 13, 2018
@acammack-r7 acammack-r7 merged commit e1d69d6 into rapid7:master Jun 13, 2018
acammack-r7 added a commit that referenced this pull request Jun 13, 2018
@bcoles bcoles deleted the psnuffle branch June 14, 2018 13:21
This pull request was closed.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants