Class: Metasploit::Aggregator::Http::Responder

Inherits:
Object
  • Object
show all
Defined in:
lib/metasploit/aggregator/http/responder.rb

Overview

a Responder acts a a gateway to convert data from a port to into a Request object used in the aggregator. It also reverses this process as a gateway for sending Request object back as responses to the original Request.

Direct Known Subclasses

SslResponder

Instance Attribute Summary collapse

Class Method Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(uri) ⇒ Responder

Returns a new instance of Responder.



18
19
20
21
22
23
24
25
26
 
# File 'lib/metasploit/aggregator/http/responder.rb', line 18

def initialize(uri)
  @uri = uri
  @queue = Queue.new
  @thread = Thread.new { process_requests }
  @time = Time.now
  @router = Router.instance
  @session_service = SessionDetailService.instance
  @pending_request = nil
end

Instance Attribute Details

#log_messages ⇒ Object

Returns the value of attribute log_messages.



15
16
17
 
# File 'lib/metasploit/aggregator/http/responder.rb', line 15

def log_messages
  @log_messages
end

#queue ⇒ Object

Returns the value of attribute queue.



13
14
15
 
# File 'lib/metasploit/aggregator/http/responder.rb', line 13

def queue
  @queue
end

#time ⇒ Object

Returns the value of attribute time.



14
15
16
 
# File 'lib/metasploit/aggregator/http/responder.rb', line 14

def time
  @time
end

#uri ⇒ Object (readonly)

Returns the value of attribute uri.



16
17
18
 
# File 'lib/metasploit/aggregator/http/responder.rb', line 16

def uri
  @uri
end

Class Method Details

.get_data(connection, guaranteed_length) ⇒ Object 



111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
 
# File 'lib/metasploit/aggregator/http/responder.rb', line 111

def self.get_data(connection, guaranteed_length)
  checked_first = has_length = guaranteed_length
  content_length = 0
  request_lines = []

  while (input = connection.gets)
    request_lines << input
    # break for body read
    break if (input.inspect.gsub /^"|"$/, '').eql? '\r\n'

    if !checked_first && !has_length
      has_length = input.include?('POST')
      checked_first = true
    end

    if has_length && input.include?('Content-Length')
      content_length = input[(input.index(':') + 1)..input.length].to_i
    end

  end
  body = ''
  if has_length
    while body.length < content_length
      body += connection.read(content_length - body.length)
    end
  end
  Metasploit::Aggregator::Http::Request.new request_lines, body, connection
end

Instance Method Details

#close_connection(connection) ⇒ Object 



144
145
146
 
# File 'lib/metasploit/aggregator/http/responder.rb', line 144

def close_connection(connection)
  connection.close
end

#get_connection(host, port) ⇒ Object 



140
141
142
 
# File 'lib/metasploit/aggregator/http/responder.rb', line 140

def get_connection(host, port)
  TCPSocket.new host, port
end

#process_requests ⇒ Object 



28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
 
# File 'lib/metasploit/aggregator/http/responder.rb', line 28

def process_requests

  while true do
    begin
      request_task = @queue.pop
      connection = request_task.socket
      request_task.headers

      send, recv = @router.get_forward(@uri)
      if send.nil?
        # when no forward found park the connection for now
        # in the future this may get smarter and return a 404 or something
        send_parked_response(connection)
        next
      end

      # response from get_forward will be a queue to push messages onto and a response queue to retrieve result from
      @session_service.add_request(request_task, @uri)
      send << request_task
      @pending_request = connection

      log 'queued to console'

      # now get the response once available and send back using this connection
      begin
        request_obj = recv.pop
        @session_service.add_request(request_obj, @uri)
        tlv_response = @session_service.eval_tlv_enc(request_obj)
        unless tlv_response.nil?
          # build a new request with a the new tlv
          suppression = Metasploit::Aggregator::Http::Request.forge_request(@uri, tlv_response.to_r, connection)
          send << suppression
          log "Suppressing cryptTLV on session #{@uri}"
          send << request_task
          request_obj = recv.pop
          @session_service.add_request(suppression, @uri)
        end
        @pending_request = nil
        request_obj.headers.each do |line|
          connection.write line
        end
        unless request_obj.body.nil?
          connection.write request_obj.body
        end
        connection.flush
        @session_service.add_request(request_obj, @uri)
        log 'message delivered from console'
      rescue Exception
        log "error processing console response for #{@uri}"
      end
      close_connection(connection)
    rescue Exception => e
      log "an error occurred processing request from #{@uri}"
    end
  end

end

#send_response(request_obj, connection) ⇒ Object 



100
101
102
103
104
105
106
107
108
109
 
# File 'lib/metasploit/aggregator/http/responder.rb', line 100

def send_response(request_obj, connection)
  @pending_request = nil
  request_obj.headers.each do |line|
    connection.write line
  end
  unless request_obj.body.nil?
    connection.write request_obj.body
  end
  connection.flush
end

#stop_processing ⇒ Object 



86
87
88
89
90
91
92
 
# File 'lib/metasploit/aggregator/http/responder.rb', line 86

def stop_processing
  @thread.exit
  if @pending_request
    send_parked_response(@pending_request)
    close_connection(@pending_request)
  end
end