124

Chapter 9

 root@bt:/opt/framework3/msf3/modules/auxiliary# 

ls –l

total 52
drwxr-xr-x 23 root root 4096 Apr 10 03:22 admin
drwxr-xr-x  4 root root 4096 Dec 14 03:25 client
drwxr-xr-x 16 root root 4096 Jan  1 04:19 dos
drwxr-xr-x  8 root root 4096 Dec 14 03:25 fuzzers
drwxr-xr-x  3 root root 4096 May  2 15:38 gather
drwxr-xr-x  4 root root 4096 Dec 14 03:25 pdf
drwxr-xr-x 36 root root 4096 Apr 10 03:22 scanner
drwxr-xr-x  5 root root 4096 May  2 15:38 server
drwxr-xr-x  3 root root 4096 May  2 15:38 sniffer
drwxr-xr-x  5 root root 4096 Dec 14 03:25 spoof
drwxr-xr-x  4 root root 4096 Dec 14 03:25 sqli
drwxr-xr-x  3 root root 4096 May  2 15:38 test
drwxr-xr-x  3 root root 4096 May  2 15:38 voip

As you can see in the preceding listing, modules are installed within the 

/modules/auxiliary

 directory   of the Framework, and within that, sorted 

based on the functions they provide. Should you want to create your own 
module or edit an existing one to suit a specific purpose, you will find them 
in their corresponding directories. For instance, if you need to develop a 
fuzzer module to hunt your own bugs, you will find some pre-existing mod-
ules in the 

/fuzzers

 directory.

To list all the available auxiliary modules within Metasploit, simply issue 

the 

show auxiliary

 command   within 

msfconsole

. If you compare the preceding 

directory listing with the module names displayed in 

msfconsole

, you will notice 

that the naming of the modules depends on the underlying directory struc-
ture, as shown below.

 msf > 

show auxiliary

Auxiliary
=========

   Name

Rank

Description

   ----

----

-----------

   admin/backupexec/dump

normal

Veritas Backup Exec Windows Remote 

File Access

   admin/backupexec/registry

normal

Veritas Backup Exec Server Registry 

Access

   admin/cisco/ios_http_auth_bypass

normal

Cisco IOS HTTP Unauthorized 

Administrative Access

. . . SNIP . . .

fuzzers/ssh/ssh_version_corrupt

normal

SSH Version Corruption

   fuzzers/tds/tds_login_corrupt

normal

TDS Protocol Login Request Corruption 

Fuzzer

   fuzzers/tds/tds_login_username

normal 

TDS Protocol Login Request Username 

Fuzzer

   fuzzers/wifi/fuzz_beacon

normal 

Wireless Beacon Frame Fuzzer

   fuzzers/wifi/fuzz_proberesp

normal 

Wireless Probe Response Frame Fuzzer