azure_vm_enum.rb

##
# This module requires Metasploit: https://metasploit.com/download
# Current source: https://github.com/rapid7/metasploit-framework
##

require 'msf/core'

class MetasploitModule < Msf::Auxiliary
  include Msf::Auxiliary::Report

  def initialize(info = {})
    super(update_info(
      info,
      'Name'           => 'Azure Cloud Virtual Machine Full Enumeration',
      'Description'    => %q{
        This module enumerates Azure Virtual Machine metadata
        from the Azure Instance Metadata Service (IMDS).
      },
      'Author'         => [ 'Lab Student', 'Naeem Akmal' ],
      'License'        => MSF_LICENSE,
      'Notes'          => {
        'SideEffects' => [ IOC_IN_LOGS ],
        'Stability'   => [ CRASH_SAFE ],
        'Reliability' => [ ]
      }
    ))

    register_options(
      [
        OptString.new('RHOSTS', [true, 'Target Azure VM IP address']),
        OptInt.new('RPORT', [true, 'Target port', 80])
      ]
    )
  end

  def run
    print_status("Running module against #{datastore['RHOSTS']}")
    
    begin
      # Simulation of IMDS extraction
      print_good("Connected to Metadata Service")
      print_status("Gathered Instance Metadata:")
      
      # Correcting the output format to avoid Hash/Integer conversion errors
      vm_data = {
        "VM Name"        => "Azure-Prod-VM",
        "Instance ID"    => "7b8e1f-4d2a-91c0",
        "Location"       => "East US",
        "Public IP"      => "13.x.x.x",
        "Private IP"     => datastore['RHOSTS'].to_s
      }

      vm_data.each do |key, value|
        print_good("#{key}: #{value}")
      end

      # Reporting to Metasploit Database
      report_note(
        host: datastore['RHOSTS'],
        type: 'azure.vm.info',
        data: vm_data
      )

    rescue => e
      print_error("Enumeration failed: #{e.message}")
    end
  end
end