mirror of
https://github.com/rapid7/metasploit-payloads
synced 2025-03-30 22:19:17 +02:00
f720ca7bdb
This commit adds the ability to enumerate services on the target machine, showing the PID, the service name, the display name and an indication of the service's ability to interact with the desktop. Some other small code tidies were done too.
66 lines
1.7 KiB
C
66 lines
1.7 KiB
C
/*!
|
|
* @file extapi.h
|
|
* @brief Entry point and intialisation definitions for the extended API extension.
|
|
*/
|
|
#include "../../common/common.h"
|
|
|
|
#include "../../ReflectiveDLLInjection/DelayLoadMetSrv.h"
|
|
// include the Reflectiveloader() function, we end up linking back to the metsrv.dll's Init function
|
|
// but this doesnt matter as we wont ever call DLL_METASPLOIT_ATTACH as that is only used by the
|
|
// second stage reflective dll inject payload and not the metsrv itself when it loads extensions.
|
|
#include "../../ReflectiveDLLInjection/ReflectiveLoader.c"
|
|
|
|
#include "window.h"
|
|
#include "service.h"
|
|
|
|
// this sets the delay load hook function, see DelayLoadMetSrv.h
|
|
EnableDelayLoadMetSrv();
|
|
|
|
Command customCommands[] =
|
|
{
|
|
// Window management and enumeration
|
|
{ "extapi_window_enum",
|
|
{ request_window_enum, { 0 }, 0 },
|
|
{ EMPTY_DISPATCH_HANDLER }
|
|
},
|
|
// Service management and enumeration
|
|
{ "extapi_service_enum",
|
|
{ request_service_enum, { 0 }, 0 },
|
|
{ EMPTY_DISPATCH_HANDLER }
|
|
},
|
|
// Terminator
|
|
{ NULL,
|
|
{ EMPTY_DISPATCH_HANDLER },
|
|
{ EMPTY_DISPATCH_HANDLER }
|
|
}
|
|
};
|
|
|
|
/*!
|
|
* @brief Initialize the server extension
|
|
*/
|
|
DWORD __declspec(dllexport) InitServerExtension(Remote *remote)
|
|
{
|
|
DWORD index;
|
|
|
|
hMetSrv = remote->hMetSrv;
|
|
|
|
for (index = 0; customCommands[index].method; index++)
|
|
command_register(&customCommands[index]);
|
|
|
|
return ERROR_SUCCESS;
|
|
}
|
|
|
|
/*!
|
|
* @brief Deinitialize the server extension
|
|
*/
|
|
DWORD __declspec(dllexport) DeinitServerExtension(Remote *remote)
|
|
{
|
|
DWORD index;
|
|
|
|
for (index = 0; customCommands[index].method; index++)
|
|
command_deregister(&customCommands[index]);
|
|
|
|
return ERROR_SUCCESS;
|
|
}
|
|
|