Building a "Windows Firewall De-activator" meterpreter script
So far we have used several meterpreter scripts such as killav.rb
and persistence.rb
. Let's start discussing about developing our own meterpreter script. Ruby knowledge is essential for writing any module in Metasploit. You should have basic understanding of Ruby. There is not enough documentation available to learn directly about meterpreter scripting. The simplest and best practice is to learn Ruby language and side by side keep looking at the codes of various available modules. You can also read the Metasploit developer guide to understand about the different libraries provided by the framework which you can use while writing your own modules. The documentation can be found at http://dev.metasploit.com/redmine/projects/framework/wiki/DeveloperGuide.
The script we will develop here is a Windows Vista/7 firewall de-activator script. It will make use of the Windows command called netsh
and meterpreter will execute the command on...