Sniff.src

import_code("/dev/sources/NetSession.src");
import_code("/dev/sources/LibSpy.src");
import_code("/dev/sources/Exploit.src");
import_code("/dev/sources/DirManager.src");

//Connect to service

save = function(x)

	computer = get_shell.host_computer;

	if x.len > 0 then

		for object in x

			exCode = "name:" + object.Lib + " version:" + object.version + " address:" + object.address + " unsafe_string:" + object.buffer;
			text = "name:" + object.Lib + " version:" + object.version + " address:" + object.address + " unsafe_string:" + object.buffer + " argument:" + object.arg + " type:" + object.type;
			filename = md5(exCode);
			foldername = md5(object.Lib + object.version);
			folderpath = "/var/exploit/db/" + foldername;

			DirManager("create","/var","exploit","folder");
			DirManager("create","/var/exploit","db","folder");
			DirManager("create","/var/exploit/db",foldername,"folder");
			DirManager("create",folderpath,filename,"file");
			DirManager("content",folderpath,filename,text);

		end for

	end if

end function

if params.len == 2 then

	Session = NetSession(params[0],params[1]);

	if typeof(Session.Libs.Kernel) == "MetaLib" then

		KernelVuln = LibSpy(Session.Libs.Kernel);
		list = Exploit(KernelVuln,Session.Libs.Kernel);

		save(list);

	end if

	if typeof(Session.Libs.Meta) == "MetaLib" then

		ServiceVuln = LibSpy(Session.Libs.Meta);
		list = Exploit(ServiceVuln,Session.Libs.Meta);

		save(list);

	end if

else if params.len == 1 then

	Session = NetSession(params[0],"no_port");

	if typeof(Session.Libs.Kernel) == "MetaLib" then

		KernelVuln = LibSpy(Session.Libs.Kernel);
		list = Exploit(KernelVuln,Session.Libs.Kernel);

		save(list);

	end if

else

	print("Usage: sniff2 [ip] [opt:port_number]");

end if