Module Msf::Exploit::Remote::HttpServer
In: lib/msf/core/exploit/http.rb

This module provides methods for exploiting an HTTP client by acting as an HTTP server.

Methods

add_resource   autofilter   check_dependencies   close_client   create_response   get_resource   new   on_request_uri   random_uri   regenerate_payload   remove_resource   resource_uri   send_local_redirect   send_redirect   send_response   start_service   use_zlib  

Included Modules

Msf::Exploit::Remote::TcpServer

Classes and Modules

Module Msf::Exploit::Remote::HttpServer::HTML
Module Msf::Exploit::Remote::HttpServer::PHPInclude

Public Class methods

Protected Instance methods

add_resource(opts)

Adds a URI resource using the supplied hash parameters. 

  Path     => The path to associate the procedure with.
  Proc     => The procedure to call when the URI is requested.
  LongCall => Indicates that the request is a long call.
autofilter()

By default, all HTTP servers are not subject to automatic exploitation

check_dependencies()

This method gives a derived class the opportunity to ensure that all dependencies are present before initializing the service.

By default, all HTTP server mixins will try to use zlib.

close_client(cli)

Closes a client connection.

get_resource()

Returns the last-used resource path

on_request_uri(cli, request)

Called when a request is made to a single URI registered during the start_service. Subsequent registrations will not result in a call to on_request_uri.

random_uri()

Generates a random URI for use with making finger printing more challenging.

regenerate_payload(cli, arch = nil, platform = nil, target = nil)

Re-generates the payload, substituting the current RHOST and RPORT with the supplied client host and port.

remove_resource(name)

Removes a URI resource.

resource_uri()

Returns the configured (or random, if not configured) URI path

send_local_redirect(cli, location)

Sends a 302 redirect relative to our base path

send_redirect(cli, location='/', body='')

Sends a 302 redirect to the client

send_response(cli, body, headers = {})

Transmits a response to the supplied client, default content-type is text/html

Payload evasions are implemented here!

start_service(opts = {})

This mixin starts the HTTP server listener. This routine takes a few different hash parameters: 

  ServerHost => Override the server host to listen on (default to SRVHOST).
  ServerPort => Override the server port to listen on (default to SRVPORT).
  Uri        => The URI to handle and the associated procedure to call.
use_zlib()

Ensures that gzip can be used. If not, an exception is generated. The exception is only raised if the DisableGzip advanced option has not been set.

[Validate]