Re: HTTP Capture Module

[Jonathan Cran <jcran () 0x0e org>]

Well, you could modify the module (/msf/modules/auxiliary/server/capture),
probably in the dispatch_request(cli, req) or the close_client(cli) method.
Not sure what you're trying to do though... How would you gauge if a user
has finished submitting requests? presumably you'd have grabbed some
credentials?


jcran

hehe, on a side note, i found this random/funny while grepping through the
module:

        # http://us.version.worldofwarcraft.com/update/PatchSequenceFile.txt
        if(req.resource == "/update/PatchSequenceFile.txt")
            print_status("HTTP #{cli.peerhost} is trying to play World of
Warcraft")
        end

"i'm in ur mmorpg, stealin ur gold :)"





On Tue, Jan 26, 2010 at 1:48 AM, Terrence <secretpackets () gmail com> wrote:

> I am using the auxiliary/server/capture/http module. After the user
> has finished submitting all of the requests I would like to run a
> system command. Is there any suggestions as to how this could be done?
>
> Thank You,
> ~tuna
> _______________________________________________
> https://mail.metasploit.com/mailman/listinfo/framework



-- 
Jonathan Cran
jcran () 0x0e org
515.890.0070

_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework