mirror of
https://github.com/rapid7/metasploit-payloads
synced 2025-05-12 19:04:32 +02:00
0e9a231e8a
This commit includes a bunch of changes that are working towards being able to build the Meterpreter source from CMake. Changes include: * Updated `make.bat` which does the stuff that we need. * Removed a bunch of stuff from the python extension source tree so that CMake generator would not include them. * Moved a few things around in the priv extension. * Created `CMakeFileLists.txt` for all the projects. There are a few hacks required in things like stdapi and kiwi to ignore files that are on disk but shouldn't be included in the build. Initial testing indicates that sessions run, extensions load, but some things don't work as intended. It's a start! Still much to do.
82 lines
2.7 KiB
C
82 lines
2.7 KiB
C
#include "precomp.h"
|
|
#include "common_metapi.h"
|
|
|
|
// each drive is in the form "A:\\\0" (4 chars), plus a NULL terminator at the end
|
|
#define DRIVE_STRINGS_LEN (4 * 26 + 1)
|
|
|
|
DWORD request_fs_mount_show(Remote *remote, Packet *packet)
|
|
{
|
|
DWORD dwResult = ERROR_SUCCESS;
|
|
Packet *response = met_api->packet.create_response(packet);
|
|
|
|
CHAR driveStrings[DRIVE_STRINGS_LEN] = { 0 };
|
|
|
|
do
|
|
{
|
|
if (GetLogicalDriveStringsA(DRIVE_STRINGS_LEN, driveStrings) == 0)
|
|
{
|
|
BREAK_ON_ERROR("[MOUNT] Failed to get drive strings");
|
|
}
|
|
|
|
dprintf("[MOUNT] enumerating %p ... ", driveStrings);
|
|
|
|
for (CHAR* d = driveStrings; *d != '\0'; d += strlen(d) + 1)
|
|
{
|
|
dprintf("[MOUNT] Drive found: %s", d);
|
|
|
|
Packet* driveData = met_api->packet.create_group();
|
|
UINT driveType = GetDriveTypeA(d);
|
|
dprintf("[MOUNT] %s drive type %u (0x%x)", d, driveType, driveType);
|
|
|
|
met_api->packet.add_tlv_string(driveData, TLV_TYPE_MOUNT_NAME, d);
|
|
met_api->packet.add_tlv_uint(driveData, TLV_TYPE_MOUNT_TYPE, driveType);
|
|
|
|
// get network UNC path if it's a network drive
|
|
if (driveType == DRIVE_REMOTE)
|
|
{
|
|
dprintf("[MOUNT] %s is a remote drive", d);
|
|
DWORD bufSize = 0;
|
|
CHAR temp;
|
|
if (WNetGetUniversalNameA(d, UNIVERSAL_NAME_INFO_LEVEL, &temp, &bufSize) == ERROR_MORE_DATA)
|
|
{
|
|
dprintf("[MOUNT] %s remote name requires bytes: %u", d, bufSize);
|
|
LPVOID buffer = malloc(bufSize + 1);
|
|
dprintf("[MOUNT] %s allocated %p", d, buffer);
|
|
if (WNetGetUniversalNameA(d, UNIVERSAL_NAME_INFO_LEVEL, buffer, &bufSize) == NO_ERROR)
|
|
{
|
|
dprintf("[MOUNT] %s got universal name", d);
|
|
UNIVERSAL_NAME_INFOA* nameInfo = (UNIVERSAL_NAME_INFOA*)buffer;
|
|
if (nameInfo->lpUniversalName)
|
|
{
|
|
met_api->packet.add_tlv_string(driveData, TLV_TYPE_MOUNT_UNCPATH, nameInfo->lpUniversalName);
|
|
}
|
|
}
|
|
else
|
|
{
|
|
dprintf("[MOUNT] %s failed to get remote name: %u (0x%x)", d, GetLastError(), GetLastError());
|
|
}
|
|
SAFE_FREE(buffer);
|
|
}
|
|
else
|
|
{
|
|
dprintf("[MOUNT] %s failed to get remote name size: %u (0x%x)", d, GetLastError(), GetLastError());
|
|
}
|
|
}
|
|
|
|
ULARGE_INTEGER userFreeBytes, totalBytes, totalFreeBytes;
|
|
dprintf("[MOUNT] %s getting free space ...", d);
|
|
if (GetDiskFreeSpaceExA(d, &userFreeBytes, &totalBytes, &totalFreeBytes) != 0)
|
|
{
|
|
met_api->packet.add_tlv_qword(driveData, TLV_TYPE_MOUNT_SPACE_USER, userFreeBytes.QuadPart);
|
|
met_api->packet.add_tlv_qword(driveData, TLV_TYPE_MOUNT_SPACE_TOTAL, totalBytes.QuadPart);
|
|
met_api->packet.add_tlv_qword(driveData, TLV_TYPE_MOUNT_SPACE_FREE, totalFreeBytes.QuadPart);
|
|
}
|
|
|
|
met_api->packet.add_group(response, TLV_TYPE_MOUNT, driveData);
|
|
}
|
|
} while (0);
|
|
|
|
met_api->packet.transmit_response(dwResult, remote, response);
|
|
|
|
return ERROR_SUCCESS;
|
|
} |