smb.rc

<ruby>
print_line("")
print_status("Please wait, checking if RHOSTS are set globally...")
if (framework.datastore['RHOSTS'] == nil)
print_error("[ERROR] Please set RHOSTS globally: setg RHOSTS xxx.xxx.xxx.xxx")
return
end

#Using nmap to populate metasploit database
print_good("RHOSTS set globally [ OK ] running scans...")
run_single("nmap -T4 -sS -Pn -O -oN Lt0P4tH --script-args=unsafe=1 --script=smb-check-vulns.nse,smb-os-discovery.nse,smb-enum-users.nse,smb-enum-shares.nse,smb-brute.nse,dns-brute.nse,ip-geolocation-geoplugin.nse -p 137,139,445 #{framework.datastore['RHOSTS']}")


#Check for netapi vuln...
print_good("Please wait, checking for ms08_067_netapi vulnerability")
framework.db.hosts.each do |host|
  host.services.each do |service|
    # run only if service microsoft-ds at port 445 its on open state
    if service.name == "microsoft-ds" and service.port == "445" and service.state == "open"
      run_single("use exploit/windows/smb/ms08_067_netapi")
      run_single("set RHOST #{host.address}")
      run_single("check")
    end
    print_error("Could not find any hosts in database...")
    print_error("Please set [hosts -a ipaddr ipaddr] before running this module!")
  end
  print_error("None netbios services open found in #{host.address}")
end
print_line("")
print_good("Please wait, running msf auxiliary modules...")
</ruby>

use auxiliary/scanner/smb/smb_version
run
use auxiliary/scanner/smb/pipe_auditor
run
use auxiliary/scanner/smb/smb2
run
use auxiliary/scanner/smb/smb_enumusers
run
use auxiliary/scanner/smb/smb_enumshares
run
use auxiliary/scanner/smb/smb_login
show options