Metasploit Penetration Testing Cookbook - Third Edition

How it works...

Let's start with the analysis of the main script body to understand how it works:

1. The module starts by verifying if a resource file is supplied. If so, it will run a WMIC query for each line and store the results:

    if datastore['RESOURCE']      if ::File.exist?(datastore['RESOURCE'])        ::File.open(datastore['RESOURCE']).each_line do |cmd|          next if cmd.strip.length < 1          next if cmd[0,1] == "#"          print_status "Running command #{cmd.chomp}"          result = wmic_query(cmd.chomp)          store_wmic_loot(result, cmd)        end      else        raise "Resource File does not exists!"      end

2. Otherwise, it will check for a wmic command, run it, and store the results:

    elsif datastore['COMMAND']      cmd = datastore['COMMAND']      result = wmic_query(cmd) store_wmic_loot(result, cmd) ...