metasploit-framework/modules/post/windows/gather/resolve_sid.rb

##
# $Id$
##

##
# This file is part of the Metasploit Framework and may be subject to
# redistribution and commercial restrictions. Please see the Metasploit
# Framework web site for more information on licensing and terms of use.
# http://metasploit.com/framework/
##

require 'msf/core'
require 'msf/core/post/windows/accounts'

class Metasploit3 < Msf::Post

	include Msf::Post::Windows::Accounts

	def initialize(info={})
		super( update_info( info,
				'Name'          => 'Windows Gather Local User Account SID Lookup',
				'Description'   => %q{ This module prints information about a given SID from the perspective of this session },
				'License'       => BSD_LICENSE,
				'Author'        => [ 'chao-mu'],
				'Version'       => '$Revision$',
				'Platform'      => [ 'windows' ],
				'SessionTypes'  => [ 'meterpreter' ]
			))
		register_options(
			[
				OptString.new('SID', [ true, 'SID to lookup' ]),
				OptString.new('SYSTEM_NAME', [ false, 'Where to search. If undefined, first local then trusted DCs' ]),
			], self.class)

	end

	def run
		sid = datastore['SID']
		target_system = datastore['SYSTEM_NAME']

		info = resolve_sid(sid, target_system ? target_system : nil)

		if info.nil?
			print_error 'Unable to resolve SID. Giving up.'
			return
		end

		sid_type = info[:type]

		if sid_type == :invalid
			print_error 'Invalid SID provided'
			return
		end

		unless info[:mapped]
			print_error 'No account found for the given SID'
			return
		end

		print_status "SID Type: #{sid_type.to_s}"
		print_status "Name:     #{info[:name]}"
		print_status "Domain:   #{info[:domain]}"
	end
end