Metasploit mailing list archives

MSF in msfconsole


From: mubix at room362.com (Rob Fuller)
Date: Sun, 12 Jul 2009 17:06:45 -0400

So I was playing around with msfconsole and the msfd module. One of my
biggest complaints about msfd is the lack of (guess it's called 'readline')
support. Basically history and arrowing. There are a couple ways I can think
of doing this but wanted to ping the list first.
1. Extend the plugin to check revision, then if a match, use it's own
in-memory load to cache commands and get tab completion from, before sending
them to the connected host. This has a fast load time, but can run into
issue where people have added custom code (which could be mitigated by
dynamic loading)

2. Load all or dynamically across the wire msfconsole and all of it's
dependencies. This has a high load time but requires nothing on the side of
the client

3. Use some IRB majak to go completely ruby connection based, hopefully only
requiring ruby on the clientside and loading/connecting  to the needed
modules as required.

Thoughts, ideas? The basic premise that I'm looking for is the load
msfconsole on my side, and do msf> load msfd -c 192.168.1.100 and connect to
an interactive remote msfconsole. On the server side it would be msf> load
msfd -d 0.0.0.0 54444

This ability would make mass exploitation via client-side's, db_autopwn, or
pexec scanner more 'mult-threaded' and manageable by multiple people. Plus
credcollector would really shine.

--
Rob Fuller | Mubix | Room362.com | Hak5.org
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.metasploit.com/pipermail/framework/attachments/20090712/1acfeca9/attachment.htm>


Current thread: