Module: Msf::Exploit::Brute

This modules provides a target-aware brute-forcing wrapper. It implements the exploit method and calls exploit_brute with target supplied information. If the selected target is not a bruteforce target, then single_exploit is called.

Methods

brute_exploit brute_wait exploit import_from_datastore new single_exploit

Public Class methods

new(info = {})

Initializes an instance of an exploit module that supports brute force targets.

Public Instance methods

brute_exploit(addrs)

This routine is called once per brute force iteration. The addresses parameter is a hash of addresses that are incremented each iteration and are derived from the target‘s bruteforce information or the module‘s datastore in case they are being overriden.

brute_wait(delay)

Waits for the provide delay.

exploit()

Entry point for initiating an exploit. This module wrappers the exploit method and determines whether or not the selected target supports brute force. If it does, it does some special things and wraps the brute forcing logic.

single_exploit()

Call if the target is not a brute force target.

Protected Instance methods

import_from_datastore(hash, prefix = '')

Imports information into the supplied hash from the datastore. This is a way of allowing the user to override values for a specific brute force target by name without them actually being conveyed in the options list. This is a bit of a change from 2.x, but 2.x didn‘t have per-target brute force addresses, which I think is more valuable.