Understanding Metasploit Framework For Dummies : Doc III

Understanding Metasploit Framework For Dummies : Doc III


Dalam Dokumentasi III ini berisi :
“Dokumentasi Library Rex” dan “Membuat custom exploiting tanpa Msf dari Library Rex”
Understanding I :
Library-Rex Doc

Library-Rex adalah Library yang digunakan oleh Msf Framework, karena sudah ada di-index Rubygems, Rex di Re-Package alias: dipisah dari frameworknya agar bisa bekerja secara independent dan Free To Use oleh semua pengguna FOSS (Free Open-Source Software).
Library-Rex Doc bisa ditemukan disini : http://www.rubydoc.info/gems/rex/2....
Library-Rex Doc Re-Package, menggunakan Socket yang hampir sama dengan Msf Staging hanya berbeda dalam Integrasi karena Library-Rex independent.

Mechanism Payloads Rex :
1. Meterpreter :
Meterpreter yang digunakan oleh Msf :: Rex
2. Win32 :: Kernel
Stub kernell.dll / netapi32.dll windows yang akan di sys_callhook pada CmdStagersBase Class
Understanding II :
Membuat Custom Exploiting tanpa Msf dari Library-rex
Requirements (Hal yang dibutuhkan) :
-Pemrograman (Python / gcc / Ruby )
-Socketing

Membuat Custom Payload tidak mudah. disisi lain kita membutuhkan Assembly karena itu saya hanya bisa memberikan Pemahaman Minim Sementara.
#encoding: ASCII
require 'rex'
class Nama < Rex  def initialize(info={})     super(info,        'Name'           => 'TODO Name Custom',         'Description'    => %q{ 'TODO Deskripsi' },            'Author'         => [ 'TODO',  'Some TODO Author',  ],            'License'        => MSF_LICENSE, 'More TODO Array here'        'More TODO Options'      ),      #More-Todo Here   end
   def exploit
     async #not_real_async {
          host => 'TODO', #Target
          port => 'TODO', #Port
     }
     Serv = TCP::Server(localhost, localport) do |a|
          a.accept(async)
          Cmd::Stagers::Initialize(cmd_generate, encoding_payloads(a))
     end
     #TODO ShellCode
   end
end
#kalo_di_coba_pasti_error

#ini_hanya_perumpamaan_syntax
 [License]

    Copyright (C) 2017  Dwi Mulia

    This program is free software: you can redistribute it and/or modify
    it under the terms of the GNU General Public License as published by
    the Free Software Foundation, either version 3 of the License, or
    (at your option) any later version.

    This program is distributed in the hope that it will be useful,
    but WITHOUT ANY WARRANTY; without even the implied warranty of
    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
    GNU General Public License for more details.

    You should have received a copy of the GNU General Public License
    along with this program.  If not, see <https://www.gnu.org/licenses/>.