def _execute(self):
kb.results = oset()
_setHTTPUserAgent()
_setHTTPReferer()
_setHTTPCookies()
_setHTTPTimeout()
registerPocFromDict()
pocViolation()
setMultipleTarget()
_setHTTPProxy()
start()
def _execute(self):
kb.results = oset()
_setHTTPUserAgent()
_setHTTPReferer()
_setHTTPCookies()
_setHTTPTimeout()
registerPocFromDict()
pocViolation()
setMultipleTarget()
_setHTTPProxy()
start()
def exploit(self):
"""Start to exploit targets"""
kb.results = oset()
_setHTTPUserAgent()
_setHTTPReferer()
_setHTTPCookies()
_setHTTPTimeout()
registerPocFromDict()
pocViolation()
setMultipleTarget()
_setHTTPProxy()
start()
def pcsInit(PCS_OPTIONS=None):
try:
paths.POCSUITE_ROOT_PATH = modulePath()
setPaths()
if not os.path.exists(paths.POCSUITE_HOME_PATH + '/.pocsuite'):
os.mkdir(paths.POCSUITE_HOME_PATH + '/.pocsuite')
if not os.path.exists(paths.POCSUITE_OUTPUT_PATH):
os.mkdir(paths.POCSUITE_OUTPUT_PATH)
argsDict = PCS_OPTIONS or parseCmdOptions()
cmdLineOptions.update(argsDict)
initOptions(cmdLineOptions)
def doNothin(*args, **kw):
return
if conf.quiet:
logger.log = doNothin
banner()
conf.showTime = True
dataToStdout("[!] legal disclaimer: %s\n\n" % LEGAL_DISCLAIMER)
dataToStdout("[*] starting at %s\n\n" % time.strftime("%X"))
if argsDict['update']:
update()
return
if argsDict['dork']:
z = ZoomEye(paths.POCSUITE_RC_PATH)
if z.newToken():
logger.log(CUSTOM_LOGGING.SUCCESS, 'ZoomEye API authorization success.')
z.resourceInfo()
else:
logger.log(CUSTOM_LOGGING.SUCCESS, 'ZoomEye API authorization failed,Please input Telnet404 Email account and Password for use ZoomEye API!')
z.write_conf()
if z.newToken():
logger.log(CUSTOM_LOGGING.SUCCESS, 'ZoomEye API authorization success.')
z.resourceInfo()
else:
sys.exit(logger.log(CUSTOM_LOGGING.ERROR, 'ZoomEye API authorization failed, make sure correct credentials provided in "~/.pocsuiterc".'))
info = z.resources
logger.log(
CUSTOM_LOGGING.SYSINFO,
'Available ZoomEye web search limit count: {}, host search limit count: {}'.format(info['web-search'], info['host-search'])
)
tmpIpFile = paths.POCSUITE_OUTPUT_PATH + '/zoomeye_%s.txt' % time.strftime('%Y_%m_%d_%H_%M_%S')
with open(tmpIpFile, 'w') as fp:
search_types = argsDict.get('search_type', 'web')
if 'host' not in search_types and 'web' not in search_types:
search_types = 'web'
for page in range(argsDict.get('max_page', 1)):
for search_type in search_types.split(','):
if search_type in ['web', 'host']:
for ip in z.search(argsDict['dork'], page, search_type):
if type(ip) == list:
fp.write('%s\n' % ip[0])
else:
fp.write('%s\n' % ip)
conf.urlFile = argsDict['urlFile'] = tmpIpFile
if not any((argsDict['url'] or argsDict['urlFile'], conf.requires, conf.requiresFreeze)):
errMsg = 'No "url" or "urlFile" or "dork" assigned.'
sys.exit(logger.log(CUSTOM_LOGGING.ERROR, errMsg))
if not any((argsDict['pocFile'], argsDict['vulKeyword'], argsDict['ssvid'])):
errMsg = 'No "--url" or "--file" or "--vul-keyword" or "--ssv-id" assigned.'
sys.exit(logger.log(CUSTOM_LOGGING.ERROR, errMsg))
if argsDict['ssvid']:
if not os.path.exists(paths.POCSUITE_MODULES_PATH):
os.mkdir(paths.POCSUITE_MODULES_PATH)
if not argsDict['ssvid'].isdigit():
warnMsg = "Paramenter SSV ID must be integer number"
logger.log(CUSTOM_LOGGING.WARNING, warnMsg)
else:
s = Seebug(paths.POCSUITE_RC_PATH)
if not s.newToken():
logger.log(CUSTOM_LOGGING.ERROR,
'Seebug API authorization failed, Please input Telnet404 Email account for use Seebug API，you can get it in [https://www.seebug.org/accounts/detail].')
s.write_conf()
if not s.static():
sys.exit(logger.log(CUSTOM_LOGGING.ERROR,
'Seebug API authorization failed, make sure correct credentials provided in "~/.pocsuiterc".'))
logger.log(CUSTOM_LOGGING.SUCCESS, 'Seebug API authorization succeed.')
p = s.retrieve(argsDict['ssvid'])
if 'code' in p:
tmp = '%s/%s.py' % (paths.POCSUITE_MODULES_PATH, argsDict['ssvid'])
with open(tmp, 'w') as fp:
fp.write(p['code'])
conf.pocFile = tmp
else:
warnMsg = "Fetch SSV-ID '%s' PoC failed! Check your Telnet404 account API permission." % argsDict['ssvid']
logger.log(CUSTOM_LOGGING.WARNING, warnMsg)
if argsDict['vulKeyword']:
if not os.path.exists(paths.POCSUITE_MODULES_PATH):
os.mkdir(paths.POCSUITE_MODULES_PATH)
folderPath = '%s/%s' % (paths.POCSUITE_MODULES_PATH, argsDict['vulKeyword'])
if not os.path.exists(folderPath):
os.mkdir(folderPath)
s = Seebug(paths.POCSUITE_RC_PATH)
if not s.newToken():
logger.log(CUSTOM_LOGGING.ERROR, 'Seebug API authorization failed, Please input Telnet404 Email account for use Seebug API，you can get it in [https://www.seebug.org/accounts/detail].')
s.write_conf()
if not s.static():
sys.exit(logger.log(CUSTOM_LOGGING.ERROR, 'Seebug API authorization failed, make sure correct credentials provided in "~/.pocsuiterc".'))
logger.log(CUSTOM_LOGGING.SUCCESS, 'Seebug API authorization succeed.')
logger.log(CUSTOM_LOGGING.SYSINFO, s.seek(argsDict['vulKeyword']))
if len(s.pocs) == 0:
infoMsg = "No available PoC for your Telnet404 account, Try exchange PoC on Seebug website!\n(https://www.seebug.org)"
logger.log(CUSTOM_LOGGING.WARNING, infoMsg)
for poc in s.pocs:
p = s.retrieve(poc['id'])
tmp = '%s/%s.py' % (folderPath, poc['id'])
with open(tmp, 'w') as fp:
fp.write(p['code'])
init()
start()
except PocsuiteUserQuitException:
errMsg = "user quit"
logger.log(CUSTOM_LOGGING.ERROR, errMsg)
except KeyboardInterrupt:
print
errMsg = "user aborted"
logger.log(CUSTOM_LOGGING.ERROR, errMsg)
except EOFError:
print
errMsg = "exit"
logger.log(CUSTOM_LOGGING.ERROR, errMsg)
except SystemExit:
pass
except Exception, ex:
print
print ex
# errMsg = unhandledExceptionMessage()
# logger.log(CUSTOM_LOGGING.WARNING, errMsg)
excMsg = traceback.format_exc()
dataToStdout(excMsg)