Module: Rex::Post::Meterpreter::Extensions::Stdapi

Defined in:
lib/rex/post/meterpreter/extensions/stdapi/ui.rb,
lib/rex/post/meterpreter/extensions/stdapi/tlv.rb,
lib/rex/post/meterpreter/extensions/stdapi/fs/io.rb,
lib/rex/post/meterpreter/extensions/stdapi/fs/dir.rb,
lib/rex/post/meterpreter/extensions/stdapi/stdapi.rb,
lib/rex/post/meterpreter/extensions/stdapi/fs/file.rb,
lib/rex/post/meterpreter/extensions/stdapi/net/arp.rb,
lib/rex/post/meterpreter/extensions/stdapi/net/route.rb,
lib/rex/post/meterpreter/extensions/stdapi/sys/power.rb,
lib/rex/post/meterpreter/extensions/stdapi/net/config.rb,
lib/rex/post/meterpreter/extensions/stdapi/net/socket.rb,
lib/rex/post/meterpreter/extensions/stdapi/sys/config.rb,
lib/rex/post/meterpreter/extensions/stdapi/sys/thread.rb,
lib/rex/post/meterpreter/extensions/stdapi/net/netstat.rb,
lib/rex/post/meterpreter/extensions/stdapi/net/resolve.rb,
lib/rex/post/meterpreter/extensions/stdapi/railgun/dll.rb,
lib/rex/post/meterpreter/extensions/stdapi/railgun/tlv.rb,
lib/rex/post/meterpreter/extensions/stdapi/sys/process.rb,
lib/rex/post/meterpreter/extensions/stdapi/fs/file_stat.rb,
lib/rex/post/meterpreter/extensions/stdapi/railgun/util.rb,
lib/rex/post/meterpreter/extensions/stdapi/sys/registry.rb,
lib/rex/post/meterpreter/extensions/stdapi/net/interface.rb,
lib/rex/post/meterpreter/extensions/stdapi/sys/event_log.rb,
lib/rex/post/meterpreter/extensions/stdapi/webcam/webcam.rb,
lib/rex/post/meterpreter/extensions/stdapi/railgun/railgun.rb,
lib/rex/post/meterpreter/extensions/stdapi/railgun/multicall.rb,
lib/rex/post/meterpreter/extensions/stdapi/railgun/dll_helper.rb,
lib/rex/post/meterpreter/extensions/stdapi/railgun/mock_magic.rb,
lib/rex/post/meterpreter/extensions/stdapi/railgun/buffer_item.rb,
lib/rex/post/meterpreter/extensions/stdapi/railgun/dll_wrapper.rb,
lib/rex/post/meterpreter/extensions/stdapi/railgun/dll_function.rb,
lib/rex/post/meterpreter/extensions/stdapi/railgun/api_constants.rb,
lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_ntdll.rb,
lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_psapi.rb,
lib/rex/post/meterpreter/extensions/stdapi/railgun/platform_util.rb,
lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_user32.rb,
lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_ws2_32.rb,
lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_crypt32.rb,
lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_shell32.rb,
lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_version.rb,
lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_wlanapi.rb,
lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_wldap32.rb,
lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_advapi32.rb,
lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_iphlpapi.rb,
lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_kernel32.rb,
lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_netapi32.rb,
lib/rex/post/meterpreter/extensions/stdapi/sys/process_subsystem/io.rb,
lib/rex/post/meterpreter/extensions/stdapi/railgun/type/pointer_util.rb,
lib/rex/post/meterpreter/extensions/stdapi/railgun/win_const_manager.rb,
lib/rex/post/meterpreter/extensions/stdapi/sys/process_subsystem/image.rb,
lib/rex/post/meterpreter/extensions/stdapi/sys/process_subsystem/memory.rb,
lib/rex/post/meterpreter/extensions/stdapi/sys/process_subsystem/thread.rb,
lib/rex/post/meterpreter/extensions/stdapi/net/socket_subsystem/udp_channel.rb,
lib/rex/post/meterpreter/extensions/stdapi/sys/registry_subsystem/registry_key.rb,
lib/rex/post/meterpreter/extensions/stdapi/sys/event_log_subsystem/event_record.rb,
lib/rex/post/meterpreter/extensions/stdapi/sys/registry_subsystem/registry_value.rb,
lib/rex/post/meterpreter/extensions/stdapi/net/socket_subsystem/tcp_client_channel.rb,
lib/rex/post/meterpreter/extensions/stdapi/net/socket_subsystem/tcp_server_channel.rb,
lib/rex/post/meterpreter/extensions/stdapi/sys/registry_subsystem/remote_registry_key.rb

Defined Under Namespace

Modules: Fs, Net, Railgun, Sys, Webcam Classes: Stdapi, UI

Constant Summary collapse

TLV_TYPE_HANDLE =

General

TLV_META_TYPE_QWORD   |  600
TLV_TYPE_INHERIT = 
TLV_META_TYPE_BOOL    |  601
TLV_TYPE_PROCESS_HANDLE = 
TLV_META_TYPE_QWORD   |  630
TLV_TYPE_THREAD_HANDLE = 
TLV_META_TYPE_QWORD   |  631
TLV_TYPE_PRIVILEGE = 
TLV_META_TYPE_STRING  |  632
TLV_TYPE_DIRECTORY_PATH =

Fs

TLV_META_TYPE_STRING  | 1200
TLV_TYPE_FILE_NAME = 
TLV_META_TYPE_STRING  | 1201
TLV_TYPE_FILE_PATH = 
TLV_META_TYPE_STRING  | 1202
TLV_TYPE_FILE_MODE = 
TLV_META_TYPE_STRING  | 1203
TLV_TYPE_FILE_SIZE = 
TLV_META_TYPE_UINT    | 1204
TLV_TYPE_STAT_BUF = 
TLV_META_TYPE_COMPLEX | 1220
TLV_TYPE_SEARCH_RECURSE = 
TLV_META_TYPE_BOOL    | 1230
TLV_TYPE_SEARCH_GLOB = 
TLV_META_TYPE_STRING  | 1231
TLV_TYPE_SEARCH_ROOT = 
TLV_META_TYPE_STRING  | 1232
TLV_TYPE_SEARCH_RESULTS = 
TLV_META_TYPE_GROUP   | 1233
TLV_TYPE_HOST_NAME = 
TLV_META_TYPE_STRING  | 1400
TLV_TYPE_PORT = 
TLV_META_TYPE_UINT    | 1401
TLV_TYPE_INTERFACE_MTU = 
TLV_META_TYPE_UINT    | 1402
TLV_TYPE_INTERFACE_FLAGS = 
TLV_META_TYPE_STRING  | 1403
TLV_TYPE_INTERFACE_INDEX = 
TLV_META_TYPE_UINT    | 1404
TLV_TYPE_SUBNET = 
TLV_META_TYPE_RAW     | 1420
TLV_TYPE_NETMASK = 
TLV_META_TYPE_RAW     | 1421
TLV_TYPE_GATEWAY = 
TLV_META_TYPE_RAW     | 1422
TLV_TYPE_NETWORK_ROUTE = 
TLV_META_TYPE_GROUP   | 1423
TLV_TYPE_IP_PREFIX = 
TLV_META_TYPE_UINT    | 1424
TLV_TYPE_ARP_ENTRY = 
TLV_META_TYPE_GROUP   | 1425
TLV_TYPE_IP = 
TLV_META_TYPE_RAW     | 1430
TLV_TYPE_MAC_ADDRESS = 
TLV_META_TYPE_RAW     | 1431
TLV_TYPE_MAC_NAME = 
TLV_META_TYPE_STRING  | 1432
TLV_TYPE_NETWORK_INTERFACE = 
TLV_META_TYPE_GROUP   | 1433
TLV_TYPE_IP6_SCOPE = 
TLV_META_TYPE_RAW     | 1434
TLV_TYPE_SUBNET_STRING = 
TLV_META_TYPE_STRING  | 1440
TLV_TYPE_NETMASK_STRING = 
TLV_META_TYPE_STRING  | 1441
TLV_TYPE_GATEWAY_STRING = 
TLV_META_TYPE_STRING  | 1442
TLV_TYPE_ROUTE_METRIC = 
TLV_META_TYPE_UINT    | 1443
TLV_TYPE_ADDR_TYPE =

Resolve

TLV_META_TYPE_UINT    | 1444
TLV_TYPE_PROXY_CFG_AUTODETECT =

Proxy configuration

TLV_META_TYPE_BOOL    | 1445
TLV_TYPE_PROXY_CFG_AUTOCONFIGURL = 
TLV_META_TYPE_STRING  | 1446
TLV_TYPE_PROXY_CFG_PROXY = 
TLV_META_TYPE_STRING  | 1447
TLV_TYPE_PROXY_CFG_PROXYBYPASS = 
TLV_META_TYPE_STRING  | 1448
TLV_TYPE_PEER_HOST =

Socket

TLV_META_TYPE_STRING  | 1500
TLV_TYPE_PEER_PORT = 
TLV_META_TYPE_UINT    | 1501
TLV_TYPE_LOCAL_HOST = 
TLV_META_TYPE_STRING  | 1502
TLV_TYPE_LOCAL_PORT = 
TLV_META_TYPE_UINT    | 1503
TLV_TYPE_CONNECT_RETRIES = 
TLV_META_TYPE_UINT    | 1504
TLV_TYPE_NETSTAT_ENTRY = 
TLV_META_TYPE_GROUP   | 1505
TLV_TYPE_PEER_HOST_RAW = 
TLV_META_TYPE_RAW     | 1506
TLV_TYPE_LOCAL_HOST_RAW = 
TLV_META_TYPE_RAW     | 1507
TLV_TYPE_SHUTDOWN_HOW = 
TLV_META_TYPE_UINT    | 1530
PROCESS_EXECUTE_FLAG_HIDDEN =

Sys

(1 << 0)
PROCESS_EXECUTE_FLAG_CHANNELIZED = 
(1 << 1)
PROCESS_EXECUTE_FLAG_SUSPENDED = 
(1 << 2)
PROCESS_EXECUTE_FLAG_USE_THREAD_TOKEN = 
(1 << 3)
PROCESS_EXECUTE_FLAG_DESKTOP = 
(1 << 4)
PROCESS_EXECUTE_FLAG_SESSION = 
(1 << 5)
TLV_TYPE_HKEY =

Registry

TLV_META_TYPE_QWORD   | 1000
TLV_TYPE_ROOT_KEY = 
TLV_TYPE_HKEY
TLV_TYPE_BASE_KEY = 
TLV_META_TYPE_STRING  | 1001
TLV_TYPE_PERMISSION = 
TLV_META_TYPE_UINT    | 1002
TLV_TYPE_KEY_NAME = 
TLV_META_TYPE_STRING  | 1003
TLV_TYPE_VALUE_NAME = 
TLV_META_TYPE_STRING  | 1010
TLV_TYPE_VALUE_TYPE = 
TLV_META_TYPE_UINT    | 1011
TLV_TYPE_VALUE_DATA = 
TLV_META_TYPE_RAW     | 1012
TLV_TYPE_TARGET_HOST = 
TLV_META_TYPE_STRING  | 1013
TLV_TYPE_COMPUTER_NAME =

Config

TLV_META_TYPE_STRING  | 1040
TLV_TYPE_OS_NAME = 
TLV_META_TYPE_STRING  | 1041
TLV_TYPE_USER_NAME = 
TLV_META_TYPE_STRING  | 1042
TLV_TYPE_ARCHITECTURE = 
TLV_META_TYPE_STRING  | 1043
TLV_TYPE_LANG_SYSTEM = 
TLV_META_TYPE_STRING  | 1044
TLV_TYPE_ENV_VARIABLE =

Environment

TLV_META_TYPE_STRING  | 1100
TLV_TYPE_ENV_VALUE = 
TLV_META_TYPE_STRING  | 1101
TLV_TYPE_ENV_GROUP = 
TLV_META_TYPE_GROUP   | 1102
DELETE_KEY_FLAG_RECURSIVE = 
(1 << 0)
TLV_TYPE_BASE_ADDRESS =

Process

TLV_META_TYPE_QWORD   | 2000
TLV_TYPE_ALLOCATION_TYPE = 
TLV_META_TYPE_UINT    | 2001
TLV_TYPE_PROTECTION = 
TLV_META_TYPE_UINT    | 2002
TLV_TYPE_PROCESS_PERMS = 
TLV_META_TYPE_UINT    | 2003
TLV_TYPE_PROCESS_MEMORY = 
TLV_META_TYPE_RAW     | 2004
TLV_TYPE_ALLOC_BASE_ADDRESS = 
TLV_META_TYPE_QWORD   | 2005
TLV_TYPE_MEMORY_STATE = 
TLV_META_TYPE_UINT    | 2006
TLV_TYPE_MEMORY_TYPE = 
TLV_META_TYPE_UINT    | 2007
TLV_TYPE_ALLOC_PROTECTION = 
TLV_META_TYPE_UINT    | 2008
TLV_TYPE_PID = 
TLV_META_TYPE_UINT    | 2300
TLV_TYPE_PROCESS_NAME = 
TLV_META_TYPE_STRING  | 2301
TLV_TYPE_PROCESS_PATH = 
TLV_META_TYPE_STRING  | 2302
TLV_TYPE_PROCESS_GROUP = 
TLV_META_TYPE_GROUP   | 2303
TLV_TYPE_PROCESS_FLAGS = 
TLV_META_TYPE_UINT    | 2304
TLV_TYPE_PROCESS_ARGUMENTS = 
TLV_META_TYPE_STRING  | 2305
TLV_TYPE_PROCESS_ARCH = 
TLV_META_TYPE_UINT    | 2306
TLV_TYPE_PARENT_PID = 
TLV_META_TYPE_UINT    | 2307
TLV_TYPE_PROCESS_SESSION = 
TLV_META_TYPE_UINT    | 2308
TLV_TYPE_IMAGE_FILE = 
TLV_META_TYPE_STRING  | 2400
TLV_TYPE_IMAGE_FILE_PATH = 
TLV_META_TYPE_STRING  | 2401
TLV_TYPE_PROCEDURE_NAME = 
TLV_META_TYPE_STRING  | 2402
TLV_TYPE_PROCEDURE_ADDRESS = 
TLV_META_TYPE_QWORD   | 2403
TLV_TYPE_IMAGE_BASE = 
TLV_META_TYPE_QWORD   | 2404
TLV_TYPE_IMAGE_GROUP = 
TLV_META_TYPE_GROUP   | 2405
TLV_TYPE_IMAGE_NAME = 
TLV_META_TYPE_STRING  | 2406
TLV_TYPE_THREAD_ID = 
TLV_META_TYPE_UINT    | 2500
TLV_TYPE_THREAD_PERMS = 
TLV_META_TYPE_UINT    | 2502
TLV_TYPE_EXIT_CODE = 
TLV_META_TYPE_UINT    | 2510
TLV_TYPE_ENTRY_POINT = 
TLV_META_TYPE_QWORD   | 2511
TLV_TYPE_ENTRY_PARAMETER = 
TLV_META_TYPE_QWORD   | 2512
TLV_TYPE_CREATION_FLAGS = 
TLV_META_TYPE_UINT    | 2513
TLV_TYPE_REGISTER_NAME = 
TLV_META_TYPE_STRING  | 2540
TLV_TYPE_REGISTER_SIZE = 
TLV_META_TYPE_UINT    | 2541
TLV_TYPE_REGISTER_VALUE_32 = 
TLV_META_TYPE_UINT    | 2542
TLV_TYPE_REGISTER = 
TLV_META_TYPE_GROUP   | 2550
TLV_TYPE_IDLE_TIME =

Ui

TLV_META_TYPE_UINT   | 3000
TLV_TYPE_KEYS_DUMP = 
TLV_META_TYPE_STRING | 3001
TLV_TYPE_DESKTOP_SCREENSHOT = 
TLV_META_TYPE_RAW    | 3002
TLV_TYPE_DESKTOP_SWITCH = 
TLV_META_TYPE_BOOL   | 3003
TLV_TYPE_DESKTOP = 
TLV_META_TYPE_GROUP  | 3004
TLV_TYPE_DESKTOP_SESSION = 
TLV_META_TYPE_UINT   | 3005
TLV_TYPE_DESKTOP_STATION = 
TLV_META_TYPE_STRING | 3006
TLV_TYPE_DESKTOP_NAME = 
TLV_META_TYPE_STRING | 3007
TLV_TYPE_DESKTOP_SCREENSHOT_QUALITY = 
TLV_META_TYPE_UINT   | 3008
TLV_TYPE_DESKTOP_SCREENSHOT_PE32DLL_LENGTH = 
TLV_META_TYPE_UINT   | 3009
TLV_TYPE_DESKTOP_SCREENSHOT_PE32DLL_BUFFER = 
TLV_META_TYPE_STRING | 3010
TLV_TYPE_DESKTOP_SCREENSHOT_PE64DLL_LENGTH = 
TLV_META_TYPE_UINT   | 3011
TLV_TYPE_DESKTOP_SCREENSHOT_PE64DLL_BUFFER = 
TLV_META_TYPE_STRING | 3012
TLV_TYPE_EVENT_SOURCENAME =

Event Log

TLV_META_TYPE_STRING  | 4000
TLV_TYPE_EVENT_HANDLE = 
TLV_META_TYPE_QWORD   | 4001
TLV_TYPE_EVENT_NUMRECORDS = 
TLV_META_TYPE_UINT    | 4002
TLV_TYPE_EVENT_READFLAGS = 
TLV_META_TYPE_UINT    | 4003
TLV_TYPE_EVENT_RECORDOFFSET = 
TLV_META_TYPE_UINT    | 4004
TLV_TYPE_EVENT_RECORDNUMBER = 
TLV_META_TYPE_UINT    | 4006
TLV_TYPE_EVENT_TIMEGENERATED = 
TLV_META_TYPE_UINT    | 4007
TLV_TYPE_EVENT_TIMEWRITTEN = 
TLV_META_TYPE_UINT    | 4008
TLV_TYPE_EVENT_ID = 
TLV_META_TYPE_UINT    | 4009
TLV_TYPE_EVENT_TYPE = 
TLV_META_TYPE_UINT    | 4010
TLV_TYPE_EVENT_CATEGORY = 
TLV_META_TYPE_UINT    | 4011
TLV_TYPE_EVENT_STRING = 
TLV_META_TYPE_STRING  | 4012
TLV_TYPE_EVENT_DATA = 
TLV_META_TYPE_RAW     | 4013
TLV_TYPE_POWER_FLAGS =

Power

TLV_META_TYPE_UINT    | 4100
TLV_TYPE_POWER_REASON = 
TLV_META_TYPE_UINT    | 4101
TLV_TYPE_WEBCAM_IMAGE =

Webcam

TLV_META_TYPE_RAW     | (TLV_EXTENSIONS + 1)
TLV_TYPE_WEBCAM_INTERFACE_ID = 
TLV_META_TYPE_UINT    | (TLV_EXTENSIONS + 2)
TLV_TYPE_WEBCAM_QUALITY = 
TLV_META_TYPE_UINT    | (TLV_EXTENSIONS + 3)
TLV_TYPE_WEBCAM_NAME = 
TLV_META_TYPE_STRING  | (TLV_EXTENSIONS + 4)
TLV_TYPE_AUDIO_DURATION =

Audio

TLV_META_TYPE_UINT    | (TLV_EXTENSIONS + 1)
TLV_TYPE_AUDIO_DATA = 
TLV_META_TYPE_RAW     | (TLV_EXTENSIONS + 2)