Cortana Tutorial - Armitage

By default, the table tab is empty. This &refresh_vulns function will populate a table tab
for us. It uses the &call function to call db.vulns through the Metasploit Remote API. This
function returns an array of dictionaries that contain information about each vulnerability.
Conveniently, the keys of the returned dictionaries match the columns of the table tab. We
use &table_set to set the contents of the table tab.
sub refresh_vulns {
local('$vulns');
$vulns = call("db.vulns")['vulns'];
table_set($1, $vulns);
}
Note: db.vulns is an undocumented function in the Metasploit Remote API.
Fortunately, the Armitage team server emulates all db.* calls for us. Even if the
Metasploit Remote API db.* calls disappear, they will continue to work through
Armitage.
By now, our Vulnerabilities tab is populated with all of the vulnerabilities in the database.
Next, let's make the Refresh button work. Here's the table_tab_click event listener:
on tab_table_click {
if ($3 eq "Refresh") {
refresh_vulns($1);
}
}
Finally, let's define a popup menu. This menu item copies the contents of the refs column to
the clipboard:
popup vuln_hook {
item "Copy References" {
clipboard_set(join(", ", table_selected_single($1, "refs")));
}
}
Image Viewer
Cortana also provides a generic image viewer. This is the same image viewer used for
displaying screenshots and webcam shots.
To open an image tab, use:
$tab = open_image_tab("title", $arg, @buttons)
The first argument is the title of the tab. The second argument is propagated to all events
triggered by this tab. The third argument is an array of buttons that Cortana should display
below the image.
To set an image for an image tab, use the &set_image function:
set_image($tab, "/path/to/file.jpg");
35