Allow control of named pipe location via command-line

Add the ability to select which location to create FIFOs when running in
pipes mode, by passing the directory name to sploit where a target
executable would usually go.  This has been an API feature from the start,
but not exposed via the sploit runner command-line interface.

There are a couple new use-cases where this is very convenient, including
scriptifying sploit in pipes mode (testing, for example) and when running
sploit under Docker.  If pipes are placed in the working directory, all
project files can be shared with a single bind mount.

Signed-off-by: Malfurious <m@lfurio.us>
Signed-off-by: dusoleil <howcansocksbereal@gmail.com>

1 files changed, 16 insertions, 13 deletions

diff --git a/sploit/main.py b/sploit/main.py
index d918418..6d71196 100644
--- a/sploit/main.py
+++ b/sploit/main.py
@@ -1,5 +1,6 @@
 from argparse import ArgumentParser, REMAINDER
 import gc
+from os.path import isdir
 import tempfile
 import traceback
 
@@ -20,24 +21,26 @@ def print_banner(color, line1=__version__, line2='', line3=''):
 def main():
     parser = ArgumentParser(description='Execute Sploit script against target')
     parser.add_argument('script', help='Exploit script to run')
-    parser.add_argument('target', nargs=REMAINDER, help='Target program to exploit')
+    parser.add_argument('target', nargs=REMAINDER, help='Target cmdline or pipes directory')
     args = parser.parse_args()
 
-    if(len(args.target)>0):
-        target(args.script, args.target)
+    if len(args.target) == 0:
+        with tempfile.TemporaryDirectory() as tmpdir:
+            pipe(args.script, tmpdir)
+    elif len(args.target) == 1 and isdir(args.target[0]):
+        pipe(args.script, args.target[0])
     else:
-        pipe(args.script)
+        target(args.script, args.target)
 
-def pipe(script):
+def pipe(script, tmpdir):
     print_banner(ERROR, line3='Pipe Mode')
-    with tempfile.TemporaryDirectory() as tmpdir:
-        while(True):
-            try:
-                p = Pipes(tmpdir)
-            except KeyboardInterrupt:
-                break
-            runscript(script, Comm(p))
-            del p
+    while True:
+        try:
+            p = Pipes(tmpdir)
+        except KeyboardInterrupt:
+            break
+        runscript(script, Comm(p))
+        del p
 
 def target(script, target):
     print_banner(STATUS, line3='Subprocess Mode')