Cortana Tutorial - Armitage

Appendix B. Cortana Filters
Filter Name Arguments Called When...
console_style "style data" This filter allows you to modify a style
sheet before it is assigned to a normal
console.
event_style "style data" This filter allows you to modify a style
sheet before it is assigned to an event log
exploit $1 = module
$2 = target
$3 = %options
host_describe "description",
%host_data
host_image @images,
%host_data
menu_item $parent,
"title",
'accelerator'
&closure
menu_parent $parent,
"title",
module_execute
module_compatible_payloads
...
'accelerator'
user_launch "type",
"module",
%options
console.
Fired when a user launches a remote
exploit.
A filter to rewrite the description of a host
in the table and graph display. Return a
description.
A filter to modify how host icons are
displayed. Add a path to your image to the
end of @images to display. Your image
should be 1000x766px. Armitage will
cache and resize your image for you.
Every menu item added passes through
this filter. Replace $2 with your own title
and $4 with your own closure to replace a
built-­‐in menu.
...
.... Any call to Metasploit's RPC server may
be intercepted with a filter. Simply
replace periods in the name with an
underscore. So module.execute is
module_execute. The arguments to the
RPC server are passed directly.
A filter to modify a module and its
parameters (launched by a user action)
before it launches.
42