r00t-3xp10it

http.rc

Oct 10th, 2015
311
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Ruby 1.38 KB | None | 0 0
  1. <ruby>
  2. print_line("")
  3. print_status("Please wait, checking if RHOSTS are set globally...")
  4. if (framework.datastore['RHOSTS'] == nil)
  5. print_error("[ERROR] Please set RHOSTS globally: setg RHOSTS xxx.xxx.xxx.xxx")
  6. return
  7. end
  8.  
  9. #Using nmap to populate metasploit database
  10. print_good("RHOSTS set globally [ OK ] running scans...")
  11. run_single("nmap -sS -Pn -oN Lt0P4tH --append-output --script http-vuln-cve2011-3192.nse,http-shellshock.nse,ms15-034.nse,file-checker.nse -p 80 #{framework.datastore['RHOSTS']}")
  12. print_line("")
  13. print_good("Please wait, running scans...")
  14. run_single("nmap -T4 -sS -Pn -O -oN LiLiP4tH --append-output --script http-title.nse,http-headers.nse,http-methods.nse,http-enum.nse,http-email-harvest.nse,http-stored-xss.nse,http-csrf.nse,http-sql-injection.nse,http-brute.nse,dns-brute.nse,ip-geolocation-geoplugin.nse -p 80 #{framework.datastore['RHOSTS']}")
  15. print_line("")
  16. print_good("Please wait, running msf auxiliary modules...")
  17. </ruby>
  18.  
  19. use auxiliary/scanner/http/http_version
  20. run
  21. use auxiliary/scanner/http/options
  22. run
  23. use auxiliary/scanner/http/robots_txt
  24. run
  25. use auxiliary/scanner/http/dir_scanner
  26. run
  27. use auxiliary/scanner/http/files_dir
  28. run
  29. use auxiliary/scanner/http/dir_listing
  30. run
  31. use auxiliary/scanner/http/apache_mod_cgi_bash_env
  32. run
  33. use auxiliary/scanner/http/dir_webdav_unicode_bypass
  34. run
  35. use auxiliary/scanner/http/http_login
  36. show options
Advertisement
Add Comment
Please, Sign In to add comment