Ticket #208: ssl.rb

require 'msf/core'

module Msf

class Auxiliary::Test::HardeningDirListSSL < Msf::Auxiliary
        include Exploit::Remote::HttpClient

        def initialize(info = {})
                super(update_info(info,{        
                        'Name'           => 'SSL/HTTPS',
                        'Author'         => [ 'Joern Bratzke, Recurity Labs GmbH <joern@recurity-labs.com>' ],
                        'Version'       => "0.9",
                        }))
      register_options([
                        OptString.new('URI1',[true,'First Directory to check for listing', '/test1/']), 
                        OptString.new('URI2',[true,'Secound Directory to check for listing', '/test2/']), 
                        OptString.new('Signature', [true,'Signature for directory listing' , "Parent Directory"]), 
                        Opt::SSL(true),
                        Opt::RPORT(443),
                        ],self.class)
        end

        def run 
                check
        end
        def check
                numlistings = check_dir_listing(datastore['URI1'])
                numlistings = check_dir_listing(datastore['URI2'])
                print_status(" *** Summary: *** \n")
                print_status("Found #{numlistings} directory listings.")
        end
        def check_dir_listing(uri)
                n = 0
                print_status("Checking for enabled directory listing at #{uri}")
                res = send_request_raw({'uri' => uri,'method' => "GET"},10)
                if not res then
                        print_status("No response from the server")
                        return 0
                end
                if res.code == 404 then
                        print_status("Requested directory not found on server!\n")
                        return 0
                end
                if res.body.include?(datastore['Signature']) then
                        print_status("FOUND directory listing at #{uri}\n")
                        n += 1
                else 
                        print_status("NO directory listing at #{uri}\n")
                end
                n
        end
 end
end