61 lines
2.1 KiB
Plaintext
61 lines
2.1 KiB
Plaintext
// fetch data from specific kernel_router.so 3.3.1
|
|
if params.len != 1 or params[0] == "-h" or params[0] == "--help" then exit("<b>Usage: "+program_path.split("/")[-1]+" [ip_address]</b>")
|
|
metaxploit = include_lib("/lib/metaxploit.so")
|
|
if not metaxploit then
|
|
metaxploit = include_lib(current_path + "/metaxploit.so")
|
|
end if
|
|
if not metaxploit then exit("Error: Can't find metaxploit library in the /lib path or the current folder")
|
|
address = params[0]
|
|
net_session = metaxploit.net_use( address )
|
|
if not net_session then exit("Error: can't connect to net session")
|
|
libKernel = net_session.dump_lib
|
|
libName = "kernel_router.so"
|
|
print("Searching " + libName +" ...")
|
|
if not libKernel then exit("Error: " + libName + " not found.")
|
|
lanIp = user_input("Enter a LAN address: ")
|
|
result = libKernel.overflow("0x6E65E4F8", "bledquotesizedela", lanIp)
|
|
|
|
typeObject = typeof(result)
|
|
if(typeObject != "computer") then exit("Error: expected computer, obtained " + typeObject)
|
|
|
|
passwd = result.File("/etc/passwd")
|
|
|
|
if not passwd then
|
|
print("Passwd not found.")
|
|
else
|
|
print("------PASSWD------")
|
|
users = passwd.get_content.split("\n")
|
|
for line in users
|
|
if not line then continue
|
|
content = line.split(":")
|
|
print(content[0] + "\n" + content[1] + "\n")
|
|
end for
|
|
end if
|
|
|
|
homeFolder = result.File("/home")
|
|
if not homeFolder then
|
|
print("/home folder not found.")
|
|
else
|
|
|
|
print("------MAIL------")
|
|
|
|
userFolders = homeFolder.get_folders
|
|
|
|
for userFolder in userFolders
|
|
mailFile = result.File("/home/" + userFolder.name + "/Config/Mail.txt")
|
|
if not mailFile then continue
|
|
if not mailFile.has_permission("r") then exit("Error: can't read file contents. Permission deniend")
|
|
userPass = mailFile.get_content.split(":")
|
|
print(userPass[0] + "\n" + userPass[1] + "\n")
|
|
end for
|
|
|
|
print("------BANK------")
|
|
|
|
for userFolder in userFolders
|
|
bankFile = result.File("/home/" + userFolder.name + "/Config/Bank.txt")
|
|
if not bankFile then continue
|
|
if not bankFile.has_permission("r") then exit("Error: can't read file contents. Permission deniend")
|
|
userPass = bankFile.get_content.split(":")
|
|
print(userPass[0] + "\n" + userPass[1] + "\n")
|
|
end for
|
|
end if |